MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own (list views and config edits enforce ownership), but the tool-execution API does not. Any authenticated non-admin user can invoke tools on MCP servers owned by other users — servers they cannot even see in GET /api/servers. Because connected MCP servers carry real capability (filesystem, HTTP fetch, cloud APIs with the owner's keys), this is cross-tenant compromise: demonstrated arbitrary host file read (/etc/passwd, another user's secrets) and SSRF. This issue has been patched in version 1.0.30.

CVE-2026-79750 affects MCPHub, a unified hub for managing and orchestrating multiple MCP servers and APIs. Prior to version 1.0.30, a broken access control vulnerability exists in the tool-execution API, which fails to enforce ownership/scoping rules that are otherwise applied to list views and config edits. Any authenticated non-admin user can invoke tools on MCP servers owned by other users, even servers they cannot view via GET /api/servers. This cross-tenant compromise enables attackers to read arbitrary host files (e.g., /etc/passwd, secrets) and conduct Server-Side Request Forgery (SSRF) using the victim server owner's cloud API keys and credentials. The vulnerability has been patched in MCPHub version 1.0.30. Organizations running earlier versions should upgrade immediately to prevent unauthorized cross-tenant access and potential data exfiltration.