MCPHub processes ZIP archives in its MCPB file upload handler. Inside each archive, a manifest.json file defines a name field that is directly concatenated into a file path during extraction and deletion. No sanitization or validation of the manifest.name value is performed, allowing a crafted name such as ../../../etc/malicious to cause the server to write files outside its intended directory or to delete arbitrary directories. This enables attackers who can upload a malicious MCPB package to read, overwrite, or delete files on the host filesystem, affecting confidentiality, integrity, and availability.

All installations of MCPHub by samanhappy older than 0.12.13. The flaw exists only before the 0.12.13 release, which applies the necessary path sanitization.

The CVSS score of 6.9 classifies the flaw as a moderate severity vulnerability. It is not listed in the CISA KEV catalog and no EPSS score is available, implying a low probability of exploitation in the wild. However, the flaw's exploitation requires the ability to upload a malicious MCPB package, which can be possible on exposed MCPB upload endpoints. Once processed, the attacker can write or delete files in privileged system locations, potentially compromising the affected host. Given the potential impact, administrators should treat this as a high‑priority issue to remediate.