A critical authorization bypass in MCPHub allows authenticated users to modify system configurations, posing a significant risk of unauthorized administrative control.

The vulnerability resides in the updateSystemConfig handler of the PUT /api/system-config endpoint, which fails to verify administrative privileges. Although the application requires general authentication, it neglects to inspect the req.user.isAdmin flag, permitting any authenticated user to modify system settings.

The ability for a standard authenticated user to modify system configurations represents a high risk of complete system compromise. Given the CVSS score of 8.8, this vulnerability could lead to unauthorized access, data manipulation, or service disruption. Organizations relying on MCPHub for orchestration should treat this as a high priority, as the potential for privilege escalation undermines the security architecture of the entire managed environment.

Immediate Action: Update MCPHub to version 1.0.29 or later immediately to implement the necessary authorization checks.

Proactive Monitoring: Review application access logs for unusual activity involving the /api/system-config endpoint, particularly requests originating from non-administrative user accounts.

Compensating Controls: Implement stricter network access controls or Web Application Firewall rules to restrict access to the /api/system-config endpoint to trusted administrative IP addresses until the update is applied.

Public Exploit Available: No (exploit_available: false)

The severity of this vulnerability, combined with the availability of a proof-of-concept, necessitates immediate action. Administrators must prioritize updating MCPHub to version 1.0.29 to close the authorization gap. Failure to do so leaves the system exposed to unauthorized configuration changes by any authenticated user, potentially leading to full administrative takeover.