CVE-2026-53708

ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A2A, and REST or gRPC APIs. Prior to 1.0.3, the /admin/gateways/test call site in mcpgateway/admin.py calls validate_gateway_test_url() in mcpgateway/common/validators.py to resolve and reject private, loopback, link-local, and cloud-metadata addresses, but ResilientHttpClient later resolves the original hostname again without binding the validated address. When MCPGATEWAY_ADMIN_API_ENABLED is enabled, an attacker with a database-backed role containing explicit gateways.read permission can use DNS rebinding to return a public address during validation and a private or metadata address during connection, bypassing ssrf_blocked_networks and ssrf_dns_fail_closed because those controls apply only to the validation-time result. The endpoint's allow_admin_bypass=False setting means a bootstrap-only virtual platform-admin identity without a database role is not sufficient. Successful exploitation can reach internal services and cloud metadata, expose cloud credentials, access internal APIs, or probe internal network ports. This issue is fixed in version 1.0.3.

• CWE-350
• CWE-367
• CWE-918

• https://github.com/IBM/mcp-context-forge/commit/fba11a99babd80779fa05510b35fb6a153bbacaf
• https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.3
• https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-9hgc-g3w5-67cm
• https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-9hgc-g3w5-67cm

Published

Sep 14, 2026

Last Modified

Sep 14, 2026

Status

Received

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53701An out-of-bounds write vulnerability was found in GStreamer'…6.5
• CVE-2026-53702A stack buffer overflow flaw was found in the GStreamer H.26…6.5
• CVE-2026-53703A vulnerability was found in the GStreamer RealMedia demuxer…7.1
• CVE-2026-53704A flaw was found in GStreamer's RealMedia demuxer in the gst…7.1
• CVE-2026-53705A flaw was found in GStreamer's WavPack audio decoder in gst…7.6
• CVE-2026-53706PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstr…8.8
• CVE-2026-5371The MonsterInsights – Google Analytics Dashboard for WordPre…7.1
• CVE-2026-53710MCP Context Forge is an AI gateway, registry, and proxy for …10
• CVE-2026-53712SCRAM (Salted Challenge Response Authentication Mechanism) i…8.2
• CVE-2026-53713Envoy Gateway is an open source project for managing Envoy P…9.1
• CVE-2026-53714Envoy Gateway is an open source project for managing Envoy P…7.4
• CVE-2026-53715Envoy Gateway is an open source project for managing Envoy P…5.3