CVE-2026-79745

MCPHub is a unified hub for centrally managing and orchestrating multiple MCP servers/APIs. Prior to version 1.0.32 , the built-in prompt and resource controllers perform no role checking — the mutating POST/PUT routes for /api/prompts* and /api/resources* are attached to the authenticated router...