Login Request a demo
MC
Product
mcp-context-forge
by IBM · last CVE Oct 13, 2026
4
CVEs
0
On KEV
10.0
Max CVSS
2
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 0Medium 2Low 0
Severity
All severities4Critical2High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add mcp-context-forge to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-53710
10.0
1%
Sep 15
MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
Affected: < 1.0.2
CVE-2026-53709
9.8
1%
Oct 13
MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery
Affected: < 1.0.2
CVE-2026-53708
6.6
0%
Sep 14
ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
Affected: < 1.0.3
CVE-2026-53711
5.1
0%
Oct 13
MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI
Affected: >= 0.2.0, < 0.3.1
Showing 4