19 matches found
CVE-2026-53711
MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event...
CVE-2026-53709
MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWTSECRETKEY, while verifyjwttoken accepts HS256 tokens signed with that key and getcurrentuser creates a platform administrator when the token subject matches...
CVE-2026-53711
MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event...
CVE-2026-53709
Versions prior to 1.0.2 of MCP Context Forge are vulnerable to administrative token forgery due to a hard-coded JWT_SECRET_KEY shipped in mcpgateway/config.py and .env.example. The verify_jwt_token() function accepts HS256 tokens signed with this known key, and get_current_user() automatically cr...
CVE-2026-53709 MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery
MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWTSECRETKEY, while verifyjwttoken accepts HS256 tokens signed with that key and getcurrentuser creates a platform administrator when the token subject matches...
CVE-2026-53709 MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery
MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWTSECRETKEY, while verifyjwttoken accepts HS256 tokens signed with that key and getcurrentuser creates a platform administrator when the token subject matches...
PT-2026-111628
Name of the Vulnerable Software and Affected Versions MCP Context Forge versions prior to 1.0.2 Description An issue exists where the software ships with a known JWT SECRET KEY in mcpgateway/config.py and .env.example. The verify jwt token function accepts HS256 tokens signed with this key, and t...
CVE-2026-53709: Improper Authentication
MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWTSECRETKEY, while verifyjwttoken accepts HS256 tokens signed with that key and getcurrentuser creates a platform administrator when the token subject matches...
EUVD-2026-78898
IBM ContextForge MCP Gateway = v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content...
CVE-2026-53710
MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...
CVE-2026-53710 MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...
CVE-2026-53710
MCP Context Forge (IBM) is an AI gateway and proxy for MCP, A2A, REST, and gRPC APIs. The vulnerability affects the python_sandbox_server subproject (prior to 1.0.2 ), where the RestrictedPython sandbox can be bypassed through three compounding weaknesses: raw getattr exposed in safe_builtins, ru...
CVE-2026-53710 MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...
CVE-2026-53710 MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...
EUVD-2026-78933
MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...
CVE-2026-53710: Improper Control of Generation of Code
MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...
CVE-2026-18489: Exposure of Data Element to Wrong Session
IBM ContextForge MCP Gateway - Translate utility = 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session...
CVE-2026-53710
creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:09+00:00| published-proof-of-concept| https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-xm98-3vcf-fph7 2026-09-10 12:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv62kfu7xv2r 2026-09-15...