nginx-ui MCP Endpoint Unauthenticated Command Execution (CVE-2026-33032) - ATR-2026-00536 (1009af15-3da8-5cba-9d77-8d4cc554a7d2)
Detects CVE-2026-33032 (CVSS 9.8): nginx-ui exposes an MCP server endpoint that executes system commands — including nginx reload/restart, config writes, and raw shell commands — without requiring authentication. An unauthenticated network attacker can invoke MCP tool calls directly against the nginx-ui service and gain OS-level command execution on the host. Detection covers (a) tool call patterns invoking nginx management functions without an Authorization header present in the same exchange, (b) MCP config blocks pointing at nginx-ui endpoints with no auth fields, (c) payloads referencing the nginx_command_execute / nginx_reload MCP tool names, and (d) content describing the unauthenticated MCP surface of nginx-ui. CWE-306 (Missing Authentication for Critical Function), CWE-78 (OS Command Injection).