Security readout for executives and security teams
Plain-English summary
MCPHub versions before 0.12.15 let any signed-in user, including non-administrators, configure a process that the server immediately runs. A compromised or low-privilege account could therefore take control of the MCPHub host, access sensitive data, alter services, or cause outages with the permissions of the MCPHub operating-system account.
Executive priority
Treat as an immediate remediation priority for internet-accessible, multi-user, or privileged MCPHub deployments. Upgrade promptly, restrict administrative APIs, and investigate unexpected configuration changes. The absence of confirmed active exploitation lowers certainty about current attacks, not the potential business impact.
Technical view
POST /api/servers and PUT /api/servers/:name require authentication but lack administrator authorization. They accept unrestricted stdio command and argument fields, then invoke child_process.spawn. This CWE-862 authorization failure enables remote code execution as MCPHub’s OS user. The supplied sources identify version 0.12.15 as patched.
Likely exposure
Exposure exists where MCPHub earlier than 0.12.15 is deployed and untrusted, compromised, or insufficiently privileged accounts can authenticate to its API. Impact is especially severe when MCPHub runs as root, which the source bundle says is common in published Docker, npx, and systemd deployments.
Exploitation context
The attack requires an authenticated account but no administrator privileges or user interaction. Network reachability to the affected API is also necessary. The supplied record is not in CISA KEV, and the provided sources do not establish active exploitation in the wild.
Researcher notes
CVSS 3.1 is 9.9: network-accessible, low complexity, low privileges, no interaction, changed scope, and high confidentiality, integrity, and availability impact. Assessment is limited to the supplied public record, GitHub advisory, patch pull request, and release information; no independent exploitation evidence was provided.
Mitigation direction
- Upgrade MCPHub to version 0.12.15 or later.
- Restrict server-configuration endpoints to trusted administrators until upgrading.
- Run MCPHub with the least operating-system privileges required.
- Review vendor guidance and release notes before returning restricted access.
Validation and detection
- Inventory MCPHub instances and confirm every installed version.
- Verify non-administrator accounts cannot create or update server configurations.
- Review server configurations and available operational records for unexpected changes or process launches.
- Confirm the MCPHub process does not run as root unless strictly necessary.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-862: Authorization and privilege behavior lookup
Authorization weaknesses can support privilege escalation and valid-account review, depending on exploit path. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupExecution behavior lookup
The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupContainer behavior lookup
The affected technology mentions containers, so container-specific ATT&CK technique review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2026-79748 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Critical
- CVSS
- 9.9 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H3.16GitHub_MVulnerability scoring details
Base CVSS 3.1 score
9.9CriticalVector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/samanhappy/mcphub/security/advisories/GHSA-mx89-jjx9-gjr8CVE reference, GitHub_M · x_refsource_CONFIRM
- https://github.com/samanhappy/mcphub/pull/770CVE reference, GitHub_M · x_refsource_MISC
- https://github.com/samanhappy/mcphub/releases/tag/v0.12.15CVE reference, GitHub_M · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Missing Authorization
Missing Authorization represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.