← Vulnerability feed

Vulnerability record · CVE-2025-13822 · published 14 April 2026

CVE-2025-13822: Mcphubx mcphub insecure direct object reference vulnerability

Mcphubx · Mcphub

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges.

5.3 CVSS 4.0 Medium EPSS 0.35% · top 73.5% CWE-639 · Insecure direct object reference
5.3CVSS 4.0 base score
0.35%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
3 Sep 2026Last modified by NVD

Description

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges.

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://cert.pl/en/posts/2026/04/CVE-2025-13822 Third Party Advisory
https://github.com/samanhappy/mcphub Product

Track CVE-2025-13822 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.5CVE-2025-11287Mcphubx mcphub improper authentication vulnerabilityA vulnerability was identified in samanhappy MCPHub up to 0.9.10. This vulnerability affects the function handleSseConnectionfunction of the file src…EPSS 0.56%2.1CVE-2025-11285Mcphubx mcphub command injection vulnerabilityA vulnerability was found in samanhappy MCPHub up to 0.9.10. Affected by this issue is some unknown functionality of the file src/controllers/serverC…EPSS 7.8%2.0CVE-2025-11286Mcphubx mcphub server-side request forgery (ssrf) vulnerabilityA vulnerability was determined in samanhappy MCPHub up to 0.9.10. This affects an unknown part of the file src/controllers/serverController.ts of the…EPSS 0.31%8.4CVE-2026-55255Langflow IDOR in responses endpoint allows cross-user flow executionLangflow before 1.9.1 has an insecure direct object reference in the /api/v1/responses endpoint. An authenticated attacker can supply another user's …KEVEPSS 0.89%analysed

Source: NIST National Vulnerability Database (record CVE-2025-13822), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.