samanhappy MCPHub up to 0.12.12 MCPB File Upload manifest.json cleanupOldMcpbServer Name path traversal

Summaryinfo

A vulnerability classified as critical has been found in samanhappy MCPHub up to 0.12.12. The affected element is the function cleanupOldMcpbServer of the file manifest.json of the component MCPB File Upload Handler. The manipulation of the argument Name leads to path traversal. This vulnerability is listed as CVE-2026-79743. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability was found in samanhappy MCPHub up to 0.12.12. It has been rated as critical. This issue affects the function cleanupOldMcpbServer of the file manifest.json of the component MCPB File Upload Handler. The manipulation of the argument name with an unknown input leads to a path traversal vulnerability. Using CWE to declare the problem leads to CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.13, MCPB File Upload Handler extracts a ZIP file and reads manifest.json from it. The name field in the manifest is directly concatenated into a file path (line 107) without any sanitization or path traversal character validation. An attacker can craft a malicious MCPB file where manifest.name is set to something like ../../../etc/malicious, causing the file to be extracted to an arbitrary location on the file system. The cleanupOldMcpbServer function (line 110) also uses the unsanitized name, potentially allowing deletion of arbitrary directories. This issue has been patched in version 0.12.13.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2026-79743 since 08/25/2026. The exploitation is known to be easy. The attack may be initiated remotely. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1006 according to MITRE ATT&CK.

By approaching the search of inurl:manifest.json it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 0.12.13 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• samanhappy

Name

• MCPHub

Version

• 0.12.0
• 0.12.1
• 0.12.2
• 0.12.3
• 0.12.4
• 0.12.5
• 0.12.6
• 0.12.7
• 0.12.8
• 0.12.9
• 0.12.10
• 0.12.11
• 0.12.12

Website

• Product: https://github.com/samanhappy/mcphub/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion