Eight CVE records land at once for MCPHub, and every one of them trails a shipped fix

GitHub's CVE numbering authority published eight records against MCPHub on 2026-08-31, all reserved together on 2026-08-25. MCPHub (samanhappy/mcphub, about 2,400 stars) is a self-hosted gateway that manages multiple MCP servers behind shared endpoints, which is what makes its authorization model the whole story: seven of the eight records describe some path around it.

The critical one is CVE-2026-79748, rated 9.9. Before v0.12.15, the POST /api/servers and PUT /api/servers/:name endpoints accepted stdio server configurations, command and arguments included, from any authenticated user without an admin check, so a non-admin account could register a server whose command was an arbitrary process and have the hub spawn it. The fix shipped on 2026-05-02, almost four months before the record. The remaining seven follow the same trailing pattern: a non-admin rewrite of the global security configuration (CVE-2026-79744, fixed v1.0.29), missing role checks on prompt and resource CRUD (CVE-2026-79745), a server-scoped bearer key that unlocked a whole group on any overlap (CVE-2026-79746), SSRF through the OpenAPI proxy (CVE-2026-79747) and an IPv6-transition-address bypass of its guard (CVE-2026-79749), cross-tenant tool execution (CVE-2026-79750), and a path traversal via MCPB manifest names (CVE-2026-79743, low, fixed in April). The newest fix among them, v1.0.32, shipped on 2026-08-23, eight days before the records.

The CVE batch understates the repository's own disclosure record. The project has published 18 advisories, and the ten without CVE ids include three more criticals: a skipAuth option that disabled dashboard authentication entirely, unauthenticated stdio server registration when that option was on, and an SSE endpoint that accepted an arbitrary username from the URL path. The CVE feed alone shows less than half of what the project has disclosed; the repository's advisory index is the complete record, and v1.0.32 is the release that closes out the newest of it.