CVE-2026-79747 samanhappy CVE debrief

Who should care

Defenders responsible for MCPHub instances, especially those with externally accessible OpenAPI proxy paths or SSE/streamable-http transports, should assess exposure and prioritize verification and potential updates.

Why it matters

CVE-2026-79747 is a HIGH-severity SSRF vulnerability in MCPHub that allows authenticated non-admin users to make server-side requests to arbitrary URLs without egress filtering. Defenders should prioritize verifying exposure, especially for externally accessible instances, and assess the feasibility of registering arbitrary servers. The issue is patched in version 1.0.32.

• Potential unauthorized server-side requests
• Possible exposure of internal services
• Risk of blind SSRF via SSE/streamable-http transport
• Need for verification of affected versions and remediation

Technical summary

MCPHub, a unified hub for managing multiple MCP servers/APIs, is vulnerable to Server-Side Request Forgery (SSRF) prior to version 1.0.32. An authenticated non-admin user can register a server pointing at an arbitrary URL, allowing the hub to issue server-side requests to it without egress filtering. This vulnerability enables attackers to make server-side requests to arbitrary URLs, potentially exposing internal services and allowing for blind SSRF via SSE/streamable-http transport. The issue is patched in version 1.0.32.

Defensive priority

Defenders should prioritize verifying exposure of MCPHub instances, especially those with externally accessible OpenAPI proxy paths or SSE/streamable-http transports, and assess the feasibility of registering arbitrary servers.

Recommended defensive actions

• Verify MCPHub instance exposure, especially for externally accessible OpenAPI proxy paths or SSE/streamable-http transports
• Assess the feasibility of registering arbitrary servers
• Update to version 1.0.32 or later if possible
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score of 7.1 and HIGH severity. The issue is patched in version 1.0.32. Evidence is limited to public CVE and NVD information. Defenders should verify affected versions, assess exposure, and prioritize updates or mitigations. The vulnerability allows for SSRF, potentially exposing internal services.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.