CVE-2026-120323: samanhappy MCPHub passthroughHeaders.ts information disclosure
Published Nov 2, 2026
·Updated
A security flaw has been discovered in samanhappy MCPHub up to 1.0.45/1.1.7. Impacted is an unknown function of the file src/utils/passthroughHeaders.ts. The manipulation of the argument passthroughHeaders results in information disclosure. The attack may be launched remotely. Upgrading to version 1.1.8 is recommended to address this issue. The patch is identified as 040f7b9ae004070bdfe5084cde6bc2c609f78e76. It is advisable to upgrade the affected component.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
samanhappy MCPHubto a version that resolves this vulnerability.Fixed in 1.1.8Patch 040f7b9ae004070bdfe5084cde6bc2c609f78e76
Event History
Nov 2, 2026
CVE Published
via OSV·02:00 AM
Data Sourced
via OSV·02:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:18 AM
DescriptionSeverityWeakness