CVE-2026-79745

MCPHub prior to version 1.0.32 contains a missing-authorization flaw (CWE-862) in its built-in prompt and resource controllers, which perform no role checking and never read the requesting user's identity. Any authenticated non-admin user can send POST/PUT requests to the /api/prompts* and /api/resources* routes and create, overwrite, or shadow global prompt templates and resources, because those DAO records are consulted first for every user session. An attacker thereby gains unauthorized modification of data served to all other users of the hub, including the ability to plant stored prompt injections that reach other users' LLM sessions. All deployments of MCPHub running versions before 1.0.32 are affected, since the mutating routes are attached to the authenticated router without an admin gate. No public proof-of-concept, CISA KEV listing, or reported in-the-wild exploitation is known; EPSS currently estimates only a 0.2% chance of exploitation within 30 days.

What to do: Upgrade MCPHub to version 1.0.32, which adds the missing role checks on the prompt and resource write routes. As an interim mitigation, restrict POST/PUT access to /api/prompts* and /api/resources* to administrators at a reverse proxy or firewall layer, and audit existing stored prompts and resources for unauthorized creations or tampering that could inject content into other users' LLM sessions.