Authentication Bypass Vulnerability in MCPHub by SamanHappy

CVE-2025-13822

What is CVE-2025-13822?

MCPHub versions prior to 0.11.0 contain an authentication bypass vulnerability that exposes certain endpoints to unauthorized access. The lack of proper authentication middleware permits an unauthenticated attacker to invoke actions on behalf of other users, effectively leveraging their privileges without consent. This flaw can severely compromise user data and system integrity, underscoring the necessity for timely updates and security measures to mitigate risks associated with unauthorized access.

References