CVE-2025-13822 — Authentication bypass in MCPHub

CVE-2025-13822

Authentication bypass in MCPHub PUBLISHED

Description (CNA)

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges.

Affected (CNA)

Vendor / product	Versions
MCPHub / MCPHub	affected 0 before 0.11.0

CWE

CWE-639

References

https://github.com/samanhappy/mcphub
https://cert.pl/en/posts/2026/04/CVE-2025-13822

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.