CVE-2026-79745: MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, the built-i...

Added to the CISA Known Exploited Vulnerabilities catalog on 31 Aug 2026. Vendor: AI/ML. Product: LLM. CVSS score: 7.1.

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, the built-in prompt and resource controllers perform no role checking. The mutating POST/PUT /api/prompts* and ...

Required action: Review and patch if applicable to your AI infrastructure.