CVE-2026-90474 | samanhappy MCPHub up to 1.0.31 OAuth 2.0 Authorization Server improper authorization

A vulnerability was found in samanhappy MCPHub up to 1.0.31 and classified as critical. This vulnerability affects unknown code of the component OAuth 2.0 Authorization Server. Executing a manipulation can lead to improper authorization.

This vulnerability is registered as CVE-2026-90474. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More