Skip to content
OpenAdvisories

Product · IBM

mcp-context-forge

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-53711

    MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI

    MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save ma…

    IBM mcp-context-forge
  • Medium 6.6
    CVE-2026-53708

    ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

    ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A2A, and REST or gRPC APIs. Prior to 1.0.3, the /admin/gateways/test call site in mcpgateway/admin.py calls validate_gateway_test_url()…

    IBM mcp-context-forge mcp-contextforge-gateway mcp-contextforge-gateway PyPI