A Server-Side Request Forgery vulnerability in MCPHub allows authenticated attackers to bypass security controls and access internal network resources.

The application utilizes an insufficient SSRF guard that fails to validate specific IPv6 transition address families. By encoding private IPv4 addresses within NAT64, 6to4, or Teredo IPv6 formats, an authenticated user can bypass security filters to perform requests against internal services.

Successful exploitation of this vulnerability permits unauthorized access to internal network services that are otherwise protected from the public internet. Given the CVSS score of 7.6, this represents a high-severity risk that could lead to data exfiltration or the compromise of internal management interfaces. The ability to pivot into internal infrastructure poses a significant threat to the overall security posture of the affected network.

Immediate Action: Update the MCPHub installation to version 1.0.32 or later to apply the necessary patches to the IPv6 filtering logic.

Proactive Monitoring: Review web server and application logs for suspicious outbound requests originating from the MCPHub instance, particularly those targeting internal IP ranges or local hostnames.

Compensating Controls: Implement strict egress filtering on the host running MCPHub to prevent it from initiating connections to sensitive internal network segments or unauthorized endpoints.

Public Exploit Available: No

The vulnerability presents a clear path for an attacker to bypass network segmentation and interact with internal systems. Organizations utilizing MCPHub must prioritize the update to version 1.0.32 to remediate this flaw. Failure to patch allows for potential lateral movement within the environment, making immediate action essential to maintaining system integrity.