EUVD-2026-68687Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Network-reachable SSRF requiring only a valid non-admin session (PR:L); high confidentiality from reflected response exfiltration; low integrity from ability to trigger internal service requests; no availability impact.
Primary rating from Vendor (github).
CVSS VectorVendor: github
Lifecycle Timeline
5DescriptionCVE.org
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, an authenticated non-admin user can register a server pointing at an arbitrary URL and make the hub issue server-side requests to it, with no egress filtering (no block of loopback / RFC1918 / link-local 169.254.0.0/16). Via the OpenAPI proxy path the response body is returned to the caller (full, reflected SSRF); via the SSE/streamable-http transport the request is sent blind. This issue has been patched in version 1.0.32.
AnalysisAI
Server-Side Request Forgery in MCPHub prior to v1.0.32 allows any authenticated non-admin user to register an arbitrary server URL, coercing the hub into issuing outbound HTTP requests with no egress filtering against loopback, RFC1918, or link-local 169.254.0.0/16 ranges. Via the OpenAPI proxy path, the full HTTP response body is reflected back to the caller, enabling exfiltration of data from internal services including cloud metadata endpoints; via SSE and streamable-HTTP transports, the requests are sent blind, enabling internal port scanning and service triggering. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid authenticated session as a non-admin MCPHub user with access to the server registration feature - this is the default capability for non-admin users in all versions prior to 1.0.32. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The NVD CVSS 3.1 score of 7.1 (High) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N is consistent with the vulnerability mechanics. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to MCPHub version 1.0.32, which resolves this SSRF along with additional security findings including path injection, prototype pollution, rate limiting, and OAuth PKCE issues, as documented at https://github.com/samanhappy/mcphub/releases/tag/v1.0.32 (PRs #1065-#1069). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: audit MCPHub non-admin user accounts and restrict their access to essential functions, removing server registration privileges; enable logging of MCPHub server registration events and monitor for suspicious external URL registrations. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today