Nginx UI versions prior to 2.4.1 contain a security control bypass in the MCP nginx_config_add tool, allowing authenticated MCP callers or agents induced via prompt injection to inject dangerous directives and achieve code execution on affected deployments.
Disclosed 12 October 2026 · Record updated 12 October 2026
Authenticated MCP callers or agents can bypass security controls to inject malicious nginx directives, leading to code execution on deployments with njs/perl modules enabled.
VulnerabilitiesA tool exposed to AI agents wrote nginx configuration straight to disk without the validation applied to every other write path, according to an advisory published on 12 October 2026.
12 Oct 2026
