Eight MCPHub CVEs published in one 90-second window, topped by a 9.9 that gives any logged-in non-admin remote code execution
NVD published CVE-2026-79743 through CVE-2026-79750 against MCPHub between 18:17:19 and 18:17:20 UTC on 31 August 2026, a coordinated disclosure covering the same MCP aggregator. CVE-2026-79748 (9.9) lets any authenticated non-admin POST to /api/servers with arbitrary command and args, which MCPHub immediately hands to child_process.spawn; the rest cover cross-tenant tool execution on servers a user cannot even see (79750), bearer keys that grant a whole group when scoped to one server (79746, 8.1), SSRF with no loopback/RFC1918 blocking (79747), an SSRF guard that misses NAT64/6to4/Teredo IPv6 transition ranges (79749), and MCPB manifest path traversal (79743). Fixes are spread across 0.12.13, 0.12.15, 1.0.29, 1.0.30, 1.0.31 and 1.0.32, so anything below 1.0.32 is still exposed to something.
Source
↳ Follow the thread