Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-79743— MCPHub: Path Traversal via Malicious MCPB Manifest Name

Quick assessment

Affected
samanhappy mcphub
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

MCPHub 是一个统一的中心化管理平台，用于集中管理并动态编排多个 MCP 服务器/API，通过灵活的路由策略将它们映射到独立的端点。在版本 0.12.13 之前，MCPB 文件上传处理程序会解压 ZIP 文件并从中读取 。 中的 字段被直接拼接到文件路径中（第 107 行），未进行任何清理或路径遍历字符校验。攻击者可以构造一个恶意的 MCPB 文件，将 设置为类似 的值，从而将文件提取到文件系统中的任意位置。此外， 函数（第 110 行）也使用了未净化的 字段，可能导致任意目录被删除。该问题已在版本 0.12.

CVSS 6.9 · Medium

Affected Version Matrix 1

VendorProduct Version RangeStatus
samanhappy mcphub < 0.12.13 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-79743

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
MCPHub: Path Traversal via Malicious MCPB Manifest Name
Source: CVE Program / CVE List V5
Vulnerability Description
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.13, MCPB File Upload Handler extracts a ZIP file and reads manifest.json from it. The name field in the manifest is directly concatenated into a file path (line 107) without any sanitization or path traversal character validation. An attacker can craft a malicious MCPB file where manifest.name is set to something like ../../../etc/malicious, causing the file to be extracted to an arbitrary location on the file system. The cleanupOldMcpbServer function (line 110) also uses the unsanitized name, potentially allowing deletion of arbitrary directories. This issue has been patched in version 0.12.13.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
samanhappy mcphub < 0.12.13 -

II. Public POCs for CVE-2026-79743

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-79743

请登录查看更多情报信息。

Other References for CVE-2026-79743 (3)

Same Patch Batch · samanhappy · 2026-08-31 · 8 CVEs total

CVE-2026-79748 9.9 CRITICAL MCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authoriza
CVE-2026-79744 8.8 HIGH MCPHub: Missing Authorization on `PUT /api/system-config` Lets Any Non-Admin Rewrite Globa
CVE-2026-79746 8.1 HIGH MCPHub: Server-scoped bearer key gains access to an entire group via partial (any-overlap)
CVE-2026-79750 7.7 HIGH MCPHub authenticated horizontal IDOR: any non-admin user executes tools on other users' MC
CVE-2026-79749 7.6 HIGH MCPHub: SSRF Guard Bypass via IPv6 Transition Addresses in URL Validation
CVE-2026-79745 7.1 HIGH MCPHub: Missing Authorization on Built-in Prompt & Resource CRUD (Unauthorized Tampering o
CVE-2026-79747 7.1 HIGH MCPHub vulnerable to SSRF: a non-admin user can make mcphub request arbitrary URLs and rea

IV. Related Vulnerabilities

Same product: mcphub
Same vendor: samanhappy
Same weakness: CWE-22

V. Comments for CVE-2026-79743

No comments yet

Leave a comment