Vulnerabilità ed exploit · Attacco ad app web

Nginx UI’s MCP Endpoint Opens Full Server Takeover

The problem is not just a missing login check. nginx-ui’s MCP message endpoint was effectively open, so any network attacker could change Nginx behavior, reload configs, and take over the service through a management feature that was supposed to extend control, not remove it.

The flaw is CVE-2026-33032, a CVSS 9.8 authentication bypass in nginx-ui’s /mcp_message endpoint. Sources say version 2.3.4 fixes it, and exploitation is already in the wild. Pluto Security reported more than 2,600 internet-exposed instances, and the tool has seen more than 430,000 Docker pulls.

The risk is broader than one server restart. Once an attacker can write configs, they can intercept traffic, harvest admin credentials, and keep control through the management plane even if the original access path is closed.

7 fonti · 16 apr

Cronologia

• 16 apr Segnalato da Rapid7
• 15 apr Segnalato da Dark Reading

Fonti

• 16 apr Rapid7

  CVE-2026-33032: Nginx UI Missing MCP Authentication

  CVE-2026-33032 is a missing authentication bug with a CVSS score of 9.8, and exploitation in the wild has begun.

  originale

• 15 apr Dark Reading

  Critical MCP Integration Flaw Puts NGINX at Risk

  Attackers can abuse the near-maximum severity flaw in nginx-ui to restart, create, modify, and delete NGINX configuration files.

  originale

• 15 apr BleepingComputer

  Critical Nginx UI auth bypass flaw now actively exploited in the wild

  A critical vulnerability in Nginx UI with Model Context Protocol (MCP) support is now being exploited in the wild for full server takeover without authentication.

  originale

Riepilogo fornitore: F5

Part of the PlainSec briefing for 2026-04-16

Every edition of this story: Nginx UI’s MCP Endpoint Opens Full Server Takeover

Altro da oggi

• Windows Task Host Flaw Gives Local Users SYSTEM
• Old Excel RCE Returns to CISA’s Exploited List
• FortiSandbox Bugs Let Attackers Skip Login and Run Commands