MCPHub CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM MCPHub CVE published 2026-04-14

CVE-2025-13822

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-04-14T11:16:24.300Z and has not been modified since then. MCPHub versions below 0.11.0 are vulnerable to authentication bypass due to some endpoints lacking authentication middleware. This allows unauthenticated attackers to perform actions as other users, potentially leading to unauthorized access and [truncated]