Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management

CVSS 4.0 5.3 MEDIUMCVSS 3.1 6.3 MEDIUMCVSS 3.0 6.3 MEDIUMCVSS 2.0 6.5 Check source for fixed versionsKEV status unknown

cve-program · CVE-2026-94047

Published

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Upgrading to version 1.0.33 is sufficient to resolve this issue. The identifier of the patch is 18a4467bc4ec6390b1f841d8a468a37e9922f837. It is advisable to upgrade the affected component.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-94047

Published

MCPHub

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "samanhappy",
                    "product": "MCPHub",
                    "versions": [
                        {
                            "version": "1.0.0",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.1",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.2",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.3",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.4",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.5",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.6",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.7",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.8",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.9",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.10",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.11",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.12",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.13",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.14",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.15",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.16",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.17",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.18",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.19",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.20",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.21",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.22",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.23",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.24",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.25",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.26",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.27",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.28",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.29",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.30",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.31",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.32",
                            "status": "affected"
                        },
                        {
                            "version": "1.0.33",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:samanhappy:mcphub:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "Template Import Endpoint"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 22:49 UTC · 273 of 275 readable · 271 fully read · documentation 469/469 current