CVE-2026-79743— MCPHub: Path Traversal via Malicious MCPB Manifest Name
Quick assessment
Affected
samanhappy mcphub
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Saman MCPHub是Saman个人开发者的一个机器学习模型与人工智能应用的管理平台。 Saman MCPHub 0.12.13之前版本存在路径遍历漏洞，该漏洞源于MCPB文件上传处理程序未对manifest.json中的name字段进行清理和路径遍历验证，直接将其拼接至文件路径，攻击者可通过恶意MCPB文件将文件解压至任意位置，且cleanupOldMcpbServer函数也可能因使用未清理的name字段导致任意目录删除。
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| samanhappy | mcphub | < 0.12.13 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-79743
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MCPHub: Path Traversal via Malicious MCPB Manifest Name
Source: CVE Program / CVE List V5
Vulnerability Description
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.13, MCPB File Upload Handler extracts a ZIP file and reads manifest.json from it. The name field in the manifest is directly concatenated into a file path (line 107) without any sanitization or path traversal character validation. An attacker can craft a malicious MCPB file where manifest.name is set to something like ../../../etc/malicious, causing the file to be extracted to an arbitrary location on the file system. The cleanupOldMcpbServer function (line 110) also uses the unsanitized name, potentially allowing deletion of arbitrary directories. This issue has been patched in version 0.12.13.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
Saman MCPHub 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Saman MCPHub是Saman个人开发者的一个机器学习模型与人工智能应用的管理平台。 Saman MCPHub 0.12.13之前版本存在路径遍历漏洞，该漏洞源于MCPB文件上传处理程序未对manifest.json中的name字段进行清理和路径遍历验证，直接将其拼接至文件路径，攻击者可通过恶意MCPB文件将文件解压至任意位置，且cleanupOldMcpbServer函数也可能因使用未清理的name字段导致任意目录删除。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| samanhappy | mcphub | < 0.12.13 | - |
|
II. Public POCs for CVE-2026-79743
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-79743
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-79743 (1)
Vendor Advisories for CVE-2026-79743 (1)
Vendor Pages for CVE-2026-79743 (1)
-
🔗 Release v0.12.13 · samanhappy/mcphub · GitHub x_refsource_MISC
Same Patch Batch · samanhappy · 2026-08-31 · 8 CVEs total
| CVE-2026-79748 | 9.9 CRITICAL | MCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authoriza |
| CVE-2026-79744 | 8.8 HIGH | MCPHub: Missing Authorization on `PUT /api/system-config` Lets Any Non-Admin Rewrite Globa |
| CVE-2026-79746 | 8.1 HIGH | MCPHub: Server-scoped bearer key gains access to an entire group via partial (any-overlap) |
| CVE-2026-79750 | 7.7 HIGH | MCPHub authenticated horizontal IDOR: any non-admin user executes tools on other users' MC |
| CVE-2026-79749 | 7.6 HIGH | MCPHub: SSRF Guard Bypass via IPv6 Transition Addresses in URL Validation |
| CVE-2026-79745 | 7.1 HIGH | MCPHub: Missing Authorization on Built-in Prompt & Resource CRUD (Unauthorized Tampering o |
| CVE-2026-79747 | 7.1 HIGH | MCPHub vulnerable to SSRF: a non-admin user can make mcphub request arbitrary URLs and rea |
IV. Related Vulnerabilities
Same product: mcphub
-
CVE-2026-94047
samanhappy MCPHub Template Import Endpoint templateService.t -
CVE-2026-90474
MCPHub before 1.0.32 OAuth 2.0 Authentication Bypass -
CVE-2026-79744
MCPHub: Missing Authorization on `PUT /api/system-config` Le -
CVE-2026-79745
MCPHub: Missing Authorization on Built-in Prompt & Resource -
CVE-2026-79746
MCPHub: Server-scoped bearer key gains access to an entire g
Same vendor: samanhappy
-
CVE-2026-94047
samanhappy MCPHub Template Import Endpoint templateService.t -
CVE-2026-90474
MCPHub before 1.0.32 OAuth 2.0 Authentication Bypass -
CVE-2026-79744
MCPHub: Missing Authorization on `PUT /api/system-config` Le -
CVE-2026-79745
MCPHub: Missing Authorization on Built-in Prompt & Resource -
CVE-2026-79746
MCPHub: Server-scoped bearer key gains access to an entire g
Same weakness: CWE-22
-
CVE-2026-115800
UbiquitousLearning mllm Convertor __init__.py load_model pat -
CVE-2026-115569
Fallow: Jest and Vitest `projects` entries let an analyzed r -
CVE-2026-46652
Path traversal via HTTP `Content-Disposition` header in Exte -
CVE-2026-114623
baserCMS: Path traversal in the BcThemeFile admin screen all -
CVE-2026-114622
baserCMS: Encoded path traversal bypass in the theme file AP
V. Comments for CVE-2026-79743
No comments yet