CVE-2026-53711 MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event...

CVE-2026-53711 MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event...

CVE-2026-53711

The MCP Context Forge MCP Admin UI is vulnerable to stored cross-site scripting (XSS) in versions 0.2.0 through 0.3.1 . The root cause is insufficient output encoding when the Global Prompts feature stores and subsequently renders prompt templates. An authenticated attacker can save markup contai...

CVE-2026-53711 MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event...

cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by CVE-2026-53710 via mcp-contextforge-gateway (1.0.0b2)

mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: CVE-2026-53710 Source advisory: MEND:CVE-2026-53710...

cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by CVE-2026-53708 via mcp-contextforge-gateway (1.0.0b2)

mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: CVE-2026-53708 Source advisory: MEND:CVE-2026-53708...

PYSEC-2026-3862 mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

Commit: f855e54d5b7bc1c91b977574a03b91eff6b86bb6 Component: mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py Vulnerability RestrictedPython's sandbox in ContextForge's pythonsandboxserver sub-project allows arbitrary Python execution via three compounding weaknesses...

cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by CVE-2026-53710 via mcp-contextforge-gateway (1.0.0b2)

mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: CVE-2026-53710 Source advisory: OSV:PYSEC-2026-3862...

cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by CVE-2026-18486 via mcp-contextforge-gateway (1.0.0b2)

mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: CVE-2026-18486 Source advisory: MEND:CVE-2026-18486...

cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by CVE-2026-18489 via mcp-contextforge-gateway (1.0.0b2)

mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: CVE-2026-18489 Source advisory: MEND:CVE-2026-18489...

cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by CVE-2026-18905 via mcp-contextforge-gateway (1.0.0b2)

mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: CVE-2026-18905 Source advisory: MEND:CVE-2026-18905...

cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by CVE-2026-77822 via mcp-contextforge-gateway (1.0.0b2)

mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: CVE-2026-77822 Source advisory: MEND:CVE-2026-77822...

cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by unknown CVE via mcp-contextforge-gateway (1.0.0b2)

mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: unknown CVE Source advisory: MEND:WS-2026-0038...

mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment

Summary mcpgateway.services.promptservice.PromptService renders user-supplied prompt templates using Jinja2's plain Environment rather than SandboxedEnvironment. An authenticated user with permission to register or update prompt templates can store a malicious template that, on subsequent...

GHSA-VWF3-4XXJ-QG6H mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment

Summary mcpgateway.services.promptservice.PromptService renders user-supplied prompt templates using Jinja2's plain Environment rather than SandboxedEnvironment. An authenticated user with permission to register or update prompt templates can store a malicious template that, on subsequent...

cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by unknown CVE via mcp-contextforge-gateway (1.0.0b2)

mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: unknown CVE Source advisory: SNYK:PYTHON-MCPCONTEXTFORGEGATEWAY-2015887...

Improper Neutralization of Special Elements Used in a Template Engine

Overview mcp-contextforge-gateway is a ContextForge AI Gateway — an AI gateway, registry, and proxy for MCP, A2A, and REST/gRPC APIs. Exposes a unified control plane with centralized governance, discovery, and observability. Optimizes agent and tool calling, and supports plugins. Affected version...

cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by unknown CVE via mcp-contextforge-gateway (1.0.0b2)

mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: unknown CVE Source advisory: GHSA-VWF3-4XXJ-QG6H...

cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by unknown CVE via mcp-contextforge-gateway (1.0.0b2)

mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: unknown CVE Source advisory: OSV:GHSA-VWF3-4XXJ-QG6H...

cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by CVE-2026-53710 via mcp-contextforge-gateway (1.0.0b2)

mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: CVE-2026-53710 Source advisory: GHSA-XM98-3VCF-FPH7...