A critical Nginx UI vulnerability that allows attackers to take full control of servers has been exploited in the wild.
Nginx UI (nginx-ui) is a web-based management interface for the Nginx web server. It has 11,000 stars on GitHub and it may be used to manage hundreds of thousands of deployments.
The software is affected by a vulnerability tracked as CVE-2026-33032, which was patched recently in version 2.3.4. The issue relates to Nginx UI’s recently added AI (MCP) integration.
Pluto Security, whose researchers discovered and responsibly disclosed the vulnerability to Nginx UI developers in March, reported finding more than 2,600 internet-exposed instances.
The security firm showed how an unauthenticated attacker can exploit the vulnerability using specially crafted requests to take over Nginx servers.
Technical details and PoC exploit code have been publicly available.
Threat intelligence firm Recorded Future reported recently that CVE-2026-33032 was one of the 31 high-impact vulnerabilities it observed being exploited in the wild in March 2026.
However, there appears to be no public information about the nature of these attacks.
In theory, a threat actor can exploit the vulnerability to intercept traffic, deploy backdoors or malicious redirects, cause disruption, and steal sensitive information.
“This is the second critical MCP vulnerability we’ve disclosed this year, with many more in coordinated disclosure,” said Yotam Perkal, director of security research at Pluto. “The pattern is consistent — AI integration endpoints expose the same capabilities as the core application but often skip its security controls.”
CVE-2026-33032 is not the only Nginx UI vulnerability disclosed in recent months. Users have also been warned about CVE-2026-27944, which can be exploited for unauthenticated backup data downloads, and CVE-2026-33030, which allows authenticated attackers to access, modify, and delete other users’ resources.
Related: ‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks
Related: Two Vulnerabilities Patched in Ivanti Neurons for ITSM
Related: Fortinet Patches Critical FortiSandbox Vulnerabilities
