CVE-2025-13822

CVE-2025-13822 is an authentication bypass vulnerability affecting MCPHub versions prior to 0.11.0, where certain endpoints lack proper authentication middleware protections, enabling unauthenticated attackers to execute actions with the privileges of other users. The vulnerability presents a moderate risk with a FAUCET Risk Score of 32.0/100, though specific CVSS metrics are not yet available. The attack vector appears to be network-based and likely requires minimal complexity for exploitation. There is currently no evidence of active exploitation in the wild, as the vulnerability is not listed on CISA's Known Exploited Vulnerabilities catalog and remains inactive on threat tracking lists. The EPSS score of 0.0005 indicates relatively low probability of exploitation within the next 30 days, though organizations running vulnerable MCPHub versions should prioritize upgrading to version 0.11.0 or later to remediate this authentication control bypass.