What’s Vulnerable › Products

IBM mcp-context-forge vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your IBM mcp-context-forge version is affected

Latest IBM mcp-context-forge vulnerabilities

• CVE-2026-53711 — MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI (CVSS 5.1)
• CVE-2026-53709 — MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery (CVSS 9.8)
• CVE-2026-53710 — MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server (CVSS 10.0)
• CVE-2026-53708 — ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`) (CVSS 6.6)