A flaw in the importTemplate function within the Template Import Endpoint allows remote actors to manipulate the import process and gain elevated privileges. The vulnerability arises from improper privilege management, which enables an attacker to execute import requests with higher authority than intended, potentially leading to unauthorized configuration changes or the execution of arbitrary code within the MCPHub instance. The affected CWE identifiers include CWE-266 (Improper Privilege Management) and CWE-269 (Improper Privilege Configuration).

The issue applies to samanhappy MCPHub versions up to and including 1.0.32. Any instance running these versions without the recent patch is vulnerable. The fix is available in release 1.0.33, which incorporates a code review and authorization check to correct the privilege handling in templateService.ts.

The CVSS score of 5.3 indicates a moderate severity impact. EPSS data is not available, so the current exploitation probability cannot be quantified, but the vulnerability has been publicly disclosed and remote exploitation is possible. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a remote API call to the importTemplate endpoint; an attacker with network access to the MCPHub service can craft a request that bypasses the intended role checks, leading to privilege escalation. As the flaw is not limited to local users, any exposed instance over the network can be targeted.