Vulnerabilities

TI-2025-12636 CVE-2025-13822 · GHSA-9vq7-9h42-j88h

Authentication bypass in MCPHub

LOW 24

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00353 Published 2026-04-14 Fixed in 0.11.0 CWE-639

TI-2025-10335 CVE-2025-11287 · GHSA-v7c4-33vf-cqqq

HIGH 70

A vulnerability was identified in samanhappy MCPHub up to 0.9.10.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00563 Published 2025-10-05 No fix listed CWE-287

TI-2025-10334 CVE-2025-11286 · GHSA-h3mq-gv39-g8gh

MEDIUM 56

A vulnerability was determined in samanhappy MCPHub up to 0.9.10.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00311 Published 2025-10-05 No fix listed CWE-918

TI-2025-10333 CVE-2025-11285 · GHSA-5q2p-3jg8-2m98

MEDIUM 57

A vulnerability was found in samanhappy MCPHub up to 0.9.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.07857 Published 2025-10-05 No fix listed CWE-77