Skip to content
OpenAdvisories

Package · PyPI

mcp-contextforge-gateway

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 10.0
    CVE-2026-53710

    MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

    MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sandbox_server in mcp-servers/python/python_sandbox_server/src/python_sandbox_server/server_fastmcp.py exposes raw getattr through safe_built…

    IBM mcp-context-forge mcp-contextforge-gateway PyPI
  • Medium 6.6
    CVE-2026-53708

    ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

    ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A2A, and REST or gRPC APIs. Prior to 1.0.3, the /admin/gateways/test call site in mcpgateway/admin.py calls validate_gateway_test_url()…

    IBM mcp-context-forge mcp-contextforge-gateway mcp-contextforge-gateway PyPI
  • High —
    GHSA-vwf3-4xxj-qg6h

    mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment

    ### Summary `mcpgateway.services.prompt_service.PromptService` renders user-supplied prompt templates using Jinja2's plain `Environment()` rather than `SandboxedEnvironment`. An authenticated user with permission to register or update prompt templates can sto…

    mcp-contextforge-gateway PyPI