Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

CVE-2026-33032 is a critical authentication bypass vulnerability in nginx-ui that allows attackers to achieve complete Nginx service takeover through unauthenticated access to the /mcp_message endpoint.

• •The vulnerability exists because the /mcp endpoint requires authentication and IP whitelisting, but /mcp_message only requires IP whitelisting with an empty default whitelist (treated as 'allow all').
• •Attackers can establish a session and invoke MCP tools without authentication, including restarting nginx, modifying configuration files, and triggering automatic reloads.
• •The attack chain uses CVE-2026-27944 to extract encryption keys and the node_secret credential needed to authenticate with the MCP interface.
• •The flaw was patched in version 2.3.4 released on March 15, 2026, with approximately 2,689 exposed instances identified via Shodan.