{
  "entry": {
    "kind": "vuln",
    "slug": "cve-2026-33032",
    "name": "CVE-2026-33032",
    "vendor": "nginx-ui",
    "description": "nginx-ui's MCP message endpoint shipped without any authentication on the command-execution path, allowing unauthenticated attackers to restart the nginx service, modify configuration files, or push arbitrary changes, a complete control-plane takeover. The flaw is reachable from any host that can hit the nginx-ui port, which in many cloud deployments is the public internet. Patched in nginx-ui 2.6.5; CISA flagged it for high-priority remediation.",
    "website": "https://nvd.nist.gov/vuln/detail/CVE-2026-33032",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": {
      "manager": "unknown",
      "packageName": "nginx-ui",
      "command": null
    },
    "configFiles": null,
    "category": "mcp-server",
    "updatedAt": "2026-05-07",
    "risk": {
      "score": 98,
      "band": "critical",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "CVE-2026-33032",
      "aliases": [
        "ti-020"
      ],
      "title": "CVE-2026-33032: nginx-ui MCP Endpoint Authentication Bypass (CVSS 9.8)",
      "summary": "nginx-ui's MCP message endpoint shipped without any authentication on the command-execution path, allowing unauthenticated attackers to restart the nginx service, modify configuration files, or push arbitrary changes, a complete control-plane takeover. The flaw is reachable from any host that can hit the nginx-ui port, which in many cloud deployments is the public internet. Patched in nginx-ui 2.6.5; CISA flagged it for high-priority remediation.",
      "severity": "critical",
      "cvss": {
        "score": 9.8,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Remote code execution",
        "Authentication bypass"
      ],
      "componentType": "mcp-server",
      "component": {
        "name": "nginx-ui",
        "vendor": null,
        "package": "nginx-ui",
        "ecosystem": null,
        "catalogSlug": null
      },
      "affected": [
        {
          "range": "<2.6.5",
          "fixed": "2.6.5"
        }
      ],
      "exploited": false,
      "exploitPublic": false,
      "publishedAt": "2026-05-07",
      "modifiedAt": "2026-05-07",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "cve",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33032"
        }
      ],
      "mitigation": "Upgrade nginx-ui to 2.6.5+. Until patched, block external access to the nginx-ui port and require mutual TLS. Audit nginx config diffs for unauthorized changes since April. Review MCP server configurations for any nginx-ui MCP bridges and disable until confirmed patched.",
      "detectedByAnomity": true
    }
  }
}