# CVE-2026-33032: CVE-2026-33032: nginx-ui MCP Endpoint Authentication Bypass (CVSS 9.8)

> CVE-2026-33032 is a critical-severity remote code execution issue (CVSS 9.8) in nginx-ui, a MCP server. Affected: <2.6.5. Fixed in 2.6.5.

- **Canonical URL:** https://catalog.anomity.ai/vuln/cve-2026-33032
- **Aliases:** ti-020
- **Severity:** critical
- **CVSS:** 9.8
- **Attack type:** Remote code execution, Authentication bypass
- **Component:** nginx-ui (MCP server)
- **Package:** nginx-ui
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-05-07
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/cve-2026-33032

## Summary

nginx-ui's MCP message endpoint shipped without any authentication on the command-execution path, allowing unauthenticated attackers to restart the nginx service, modify configuration files, or push arbitrary changes, a complete control-plane takeover. The flaw is reachable from any host that can hit the nginx-ui port, which in many cloud deployments is the public internet. Patched in nginx-ui 2.6.5; CISA flagged it for high-priority remediation.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| <2.6.5 | 2.6.5 |

## Am I affected by CVE-2026-33032?

You are affected if you run nginx-ui <2.6.5. Versions 2.6.5 and later include the fix.

## How do I fix CVE-2026-33032?

Upgrade nginx-ui to 2.6.5+. Until patched, block external access to the nginx-ui port and require mutual TLS. Audit nginx config diffs for unauthorized changes since April. Review MCP server configurations for any nginx-ui MCP bridges and disable until confirmed patched.

## How do I find every machine running nginx-ui?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run nginx-ui and which version, then enforce a policy on it.

## References

- cve: https://nvd.nist.gov/vuln/detail/CVE-2026-33032

## Related vulnerabilities

- [CVE-2026-114090](https://catalog.anomity.ai/vuln/cve-2026-114090) — high
- [CVE-2026-114612](https://catalog.anomity.ai/vuln/cve-2026-114612) — critical
- [CVE-2026-107824](https://catalog.anomity.ai/vuln/cve-2026-107824) — critical
- [GHSA-53mr-w429-c597](https://catalog.anomity.ai/vuln/ghsa-53mr-w429-c597) — high
- [GHSA-7xgj-8392-5q4r](https://catalog.anomity.ai/vuln/ghsa-7xgj-8392-5q4r) — medium
- [CVE-2025-49596](https://catalog.anomity.ai/vuln/cve-2025-49596) — critical

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=cve-2026-33032