Vibe Coding
Pattern: MCP gateways keep shipping with authentication off by default
Two MCP gateway CVEs landed within 48 hours with the same root cause, not the same bug. CVE-2026-90474 (7.6, published 09-12) is MCPHub before 1.0.32, whose embedded OAuth 2.0 server disables client authentication by default and treats PKCE as optional, so an intercepted authorization code can be redeemed. CVE-2026-90898 (9.8, published 09-14) is Bifrost, where `governance.auth_config.is_enabled` defaults to false and an unauthenticated registration call executes a program. If you run an MCP gateway or hub, the first thing to check is not the patch level but whether auth is enabled at all.
Source
↳ Follow the thread