Skip to content
OpenAdvisories

Product · IBM

mcp-contextforge-gateway

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.6
    CVE-2026-53708

    ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

    ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A2A, and REST or gRPC APIs. Prior to 1.0.3, the /admin/gateways/test call site in mcpgateway/admin.py calls validate_gateway_test_url()…

    IBM mcp-context-forge mcp-contextforge-gateway mcp-contextforge-gateway PyPI