CyberRota Analysis
AI-GeneratedMCPHub versions prior to 1.0.32 are vulnerable to a server-side request forgery (SSRF) attack, allowing authenticated non-admin users to register arbitrary URLs, which the hub can then access without egress filtering. This vulnerability could lead to unauthorized access to internal services or sensitive data, posing a significant risk to organizations using affected versions. It is crucial for users of MCPHub to prioritize upgrading to version 1.0.32 or later to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, an authenticated non-admin user can register a server pointing at an arbitrary URL and make the hub issue server-side requests to it, with no egress filtering (no block of loopback / RFC1918 / link-local 169.254.0.0/16). Via the OpenAPI proxy path the response body is returned to the caller (full, reflected SSRF); via the SSE/streamable-http transport the request is sent blind. This issue has been patched in version 1.0.32.