MCPHub let any signed-in user rewrite the prompt templates served to everyone else

What happened

MCPHub had no role check on its prompt and resource management endpoints, so any authenticated non-admin user could create or overwrite the global templates served to every session. The built-in template store is consulted ahead of any connected MCP server, so a planted template reaches other users first.

This is stored prompt injection against other people’s sessions rather than against the person who plants it, which is what lifts a missing role check into this log. NVD scores it 7.1 high. Fixed in 1.0.32.