CVE-2026-53709

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWTSECRETKEY, while verifyjwttoken accepts HS256 tokens signed with that key and getcurrentuser creates a platform administrator when the token subject matches...

CVE-2026-53709

Versions prior to 1.0.2 of MCP Context Forge are vulnerable to administrative token forgery due to a hard-coded JWT_SECRET_KEY shipped in mcpgateway/config.py and .env.example. The verify_jwt_token() function accepts HS256 tokens signed with this known key, and get_current_user() automatically cr...

PT-2026-111628

Name of the Vulnerable Software and Affected Versions MCP Context Forge versions prior to 1.0.2 Description An issue exists where the software ships with a known JWT SECRET KEY in mcpgateway/config.py and .env.example. The verify jwt token function accepts HS256 tokens signed with this key, and t...

CVE-2026-53708: Reliance on Reverse DNS Resolution for a Security-Critical Action

ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A2A, and REST or gRPC APIs. Prior to 1.0.3, the /admin/gateways/test call site in mcpgateway/admin.py calls validategatewaytesturl in mcpgateway/common/validators.py to...

WS-2026-0038

mcpgateway.services.promptservice.PromptService renders user-supplied prompt templates using Jinja2 plain Environment instead of SandboxedEnvironment. An authenticated user with permission to register or update prompt templates can store a malicious template that, on subsequent rendering, execute...

PT-2026-86297

Summary mcpgateway.services.prompt service.PromptService renders user-supplied prompt templates using Jinja2's plain Environment rather than SandboxedEnvironment. An authenticated user with permission to register or update prompt templates can store a malicious template that, on subsequent...

PT-2026-80656

Summary The /admin/gateways/test endpoint validates submitted URLs by resolving the hostname at validation time and blocking private address ranges. The HTTP client independently re-resolves DNS at connection time with no IP binding between the two operations, creating a TOCTOU window exploitable...

PT-2026-76568

Name of the Vulnerable Software and Affected Versions mcp-gateway affected versions not specified Description A Server-Side Request Forgery SSRF issue exists due to a Time-of-Check to Time-of-Use TOCTOU window in the /admin/gateways/test endpoint. The system validates submitted URLs by resolving...

CVE-2026-19268 abdullah1854 MCPGateway Claude Usage Range Endpoint claude-usage.ts getUsageByDateRange command injection

A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/claude-usage.ts of the component Claude Usage Range Endpoint. The manipulation of the argument since leads to command...

CVE-2026-19268 abdullah1854 MCPGateway Claude Usage Range Endpoint claude-usage.ts getUsageByDateRange command injection

A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/claude-usage.ts of the component Claude Usage Range Endpoint. The manipulation of the argument since leads to command...

PT-2026-69189

Name of the Vulnerable Software and Affected Versions abdullah1854 MCPGateway versions up to 549f494a9e363f40530149de324b8097de424230 Description Remote command injection is possible within the Claude Usage Range Endpoint component. The issue exists in the getUsageByDateRange function located in...

CVE-2026-19268: Improper Neutralization of Special Elements used in a Command

A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/claude-usage.ts of the component Claude Usage Range Endpoint. The manipulation of the argument since leads to command...