CVE-2026-79747

Name of the Vulnerable Software and Affected Versions MCPHub versions prior to 1.0.32

Description An authenticated non-admin user can register a server pointing to an arbitrary URL, causing the hub to issue server-side requests without egress filtering. This lack of filtering allows requests to loopback, RFC1918, and link-local 169.254.0.0/16 addresses. When using the OpenAPI proxy path, the response body is returned to the caller, resulting in a reflected Server-Side Request Forgery (SSRF), a condition where an attacker induces the server to make requests to an unintended location. When using the SSE/streamable-http transport, the request is sent blind.

Recommendations Update to version 1.0.32.