PT-2026-29092 · Nginx-Ui+1 · Nginx-Ui+1
Yotampe-Pluto
·
Published
2026-03-28
·
Updated
2026-05-16
·
CVE-2026-33032
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Nginx UI versions prior to 2.3.6
Description
An authentication bypass exists in the Model Context Protocol (MCP) integration of Nginx UI. The software exposes two HTTP endpoints: '/mcp' and '/mcp message'. While '/mcp' requires both IP whitelisting and authentication via the
AuthRequired() middleware, the '/mcp message' endpoint only applies IP whitelisting. Because the default IP whitelist is empty, the middleware treats this as "allow all," permitting any network attacker to invoke MCP tools without authentication. Additionally, the '/api/mcp/invoke' endpoint fails to verify session tokens.This flaw allows remote attackers to achieve complete takeover of the Nginx service by performing actions such as restarting Nginx, creating, modifying, or deleting configuration files, and triggering automatic configuration reloads. Approximately 2,689 exposed instances have been identified worldwide, with active exploitation confirmed in the wild.
Recommendations
Update to Nginx UI version 2.3.6 immediately.
As a temporary workaround, disable the Nginx UI service entirely or block access to the management port at the network firewall.
Exploit
Fix
RCE
LPE
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Nginx
Nginx-Ui