Critical nginx-ui Flaw (CVE-2026-33032) Enables Nginx Server Takeover
Summary
CVE-2026-33032 lets unauthenticated attackers use nginx-ui’s MCP endpoint to take over Nginx servers. The article reports in-the-wild exploitation and describes a chain involving CVE-2026-27944; nginx-ui 2.3.4 addresses the issue.
Key points
- CVE-2026-33032 is an authentication bypass affecting nginx-ui’s /mcp_message endpoint, which relies on IP filtering and has an empty, effectively allow-all default whitelist.
- The described exploit uses a GET request to /mcp to obtain a session ID, followed by a POST request to /mcp_message to execute commands.
- CVE-2026-27944 reportedly exposes backups through /api/backup, including node_secret, credentials, SSL private keys, and Nginx configuration files; node_secret can be used to authenticate MCP sessions.
- The article reports that security monitoring sources observed exploitation attempts in the wild after disclosure.
- Successful exploitation could let attackers modify configurations, restart or reload Nginx services, and potentially intercept traffic or capture administrator credentials.
- Internet scanning services reportedly found approximately 2,689 publicly exposed nginx-ui instances.
- The maintainers released nginx-ui 2.3.4 to address the issue. Recommended mitigations include requiring authentication on /mcp_message, using deny-by-default IP allowlisting, restricting network access, and disabling MCP where possible.
Article Details
- Vulnerability Types
- Authentication bypass
- Unauthenticated exposure of sensitive backup data
- Severity
- Critical (CVSS 9.8)
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- available
- Workarounds
- Enforce authentication on the /mcp_message endpoint.
- Change IP allowlisting from the default allow-all behavior to deny-by-default.
- Restrict network access to trusted sources.
- Disable MCP functionality where possible.
MITRE ATT&CK
T1005 · Data from Local SystemAttackers could download a full system backup through the unauthenticated /api/backup endpoint.T1040 · Network SniffingThe article says successful exploitation can allow attackers to intercept network traffic.T1190 · Exploit Public-Facing ApplicationAttackers exploited internet-exposed nginx-ui endpoints, including /mcp_message, to gain control of Nginx servers.
CVE
CVE-2026-279440xJacky · nginx-uiThe issue can be chained with CVE-2026-27944 to retrieve node_secret from backups, and maintainers released nginx-ui 2.3.4 with fixes and recommended mitigations.CVE-2026-330320xJacky · nginx-uiA critical authentication bypass in nginx-ui (CVE-2026-33032) enables unauthenticated attackers to interact with the /mcp_message endpoint and achieve a full Nginx server takeover, and exploitation has been observed in
People
Products
NGINXA critical authentication bypass in nginx-ui (CVE-2026-33032) enables unauthenticated attackers to interact with the /mcp_message endpoint and achieve a full Nginx server takeover, and exploitation has been observed inNginx UIA critical authentication bypass in nginx-ui (CVE-2026-33032) enables unauthenticated attackers to interact with the /mcp_message endpoint and achieve a full Nginx server takeover, and exploitation has been observed in
Countries
ChinaThe majority of these are located in regions including China, the United States, Indonesia, Germany, and Hong Kong.GermanyThe majority of these are located in regions including China, the United States, Indonesia, Germany, and Hong Kong.IndonesiaThe majority of these are located in regions including China, the United States, Indonesia, Germany, and Hong Kong.United StatesThe majority of these are located in regions including China, the United States, Indonesia, Germany, and Hong Kong.