CVE-2026-33032: nginx-ui MCP Endpoint Authentication Bypass (CVSS 9.8)
CVE-2026-33032 is a critical-severity remote code execution issue (CVSS 9.8) in nginx-ui, a MCP server. Affected: <2.6.5. Fixed in 2.6.5.
Is nginx-ui running on your developers' machines? Anomity finds every device with this MCP server installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
CVE-2026-33032- Severity
- critical
- CVSS score
- 9.8
- Attack type
- Remote code execution, Authentication bypass
- Component
- nginx-ui · MCP server
- Package
nginx-ui- Known exploited
- No known exploitation
- Published
- Last verified
What is CVE-2026-33032?
nginx-ui's MCP message endpoint shipped without any authentication on the command-execution path, allowing unauthenticated attackers to restart the nginx service, modify configuration files, or push arbitrary changes, a complete control-plane takeover. The flaw is reachable from any host that can hit the nginx-ui port, which in many cloud deployments is the public internet. Patched in nginx-ui 2.6.5; CISA flagged it for high-priority remediation.
Affected versions
| Affected | Fixed in |
|---|---|
<2.6.5 | 2.6.5 |
Am I affected by CVE-2026-33032?
You are affected if you run nginx-ui <2.6.5. Versions 2.6.5 and later include the fix.
How do I fix CVE-2026-33032?
Upgrade nginx-ui to 2.6.5+. Until patched, block external access to the nginx-ui port and require mutual TLS. Audit nginx config diffs for unauthorized changes since April. Review MCP server configurations for any nginx-ui MCP bridges and disable until confirmed patched.
How do I find every machine running nginx-ui?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run nginx-ui and which version, then enforce a policy on it.