MCPHub, a unified hub for managing and orchestrating MCP servers and APIs, contains a critical missing authorization vulnerability prior to version 1.0.32. The built-in prompt and resource controllers perform no role checking on mutating POST/PUT routes under /api/prompts* and /api/resources*. These routes are attached to an authenticated router but lack an admin gate, and handlers never read req.user to verify permissions. DAO singletons written by these endpoints are consulted first for every session, ahead of any connected MCP server. This allows any authenticated non-admin user to create, overwrite, or shadow global prompt templates and resources served to all users. The primary impact is unauthorized integrity violation of globally-served records, with stored prompt injection into other users' LLM sessions as a downstream consequence. The vulnerability has been patched in MCPHub version 1.0.32.
