nginx-ui

Two critical vulnerabilities were disclosed last week in the MCP ecosystem, putting hundreds of thousands of servers at risk. A flaw in the nginx-ui MCP endpoint allows unauthenticated attackers to ac…

The article details the author's practical response to two recently disclosed MCP security vulnerabilities, including a critical nginx-ui flaw (CVE-2026-33032, CVSS 9.8) and a STDIO transport design f…