CVE-2025-13822Medium· 5.3▾ SunlitMCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their pri…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 3.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.4%
Last analysed / modified upstream
MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges.
mcphub < 0.11.0Upgrade past the affected range:
mcphub 0.11.0Connected by shared product, vendor, weakness, or advisory.
CVE-2025-11287High· 7.3A vulnerability was identified in samanhappy MCPHub up to 0.9.10
CVE-2025-11286Medium· 4.7A vulnerability was determined in samanhappy MCPHub up to 0.9.10
CVE-2025-11285Medium· 6.3A vulnerability was found in samanhappy MCPHub up to 0.9.10
CVE-2026-94047Medium· 6.3A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32
CVE-2026-90474Medium· 6.8MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional
CVE-2025-12288Medium· 4.3A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4