CVE-2026-53709

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() accepts HS256 tokens signed with that key and get_current_user() creates a platform administrator when the token subject matches PLATFORM_ADMIN_EMAIL and REQUIRE_USER_IN_DB is false. A remote unauthenticated attacker can therefore mint accepted administrator tokens without a database account. While the vulnerable signing key remains configured and the platform-admin bootstrap remains enabled, forged access survives password rotation, account deletion, and session revocation, allowing administrative disclosure, modification, and service disruption. This issue is fixed in version 1.0.2.

• CWE-287
• CWE-321
• CWE-798
• CWE-1188

• https://github.com/IBM/mcp-context-forge/commit/2af690f894b6e35f5f21190fdab1505f023a5272
• https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.2
• https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-m8rv-5m6m-32ff

Published

Oct 13, 2026

Last Modified

Oct 16, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53702A stack buffer overflow flaw was found in the GStreamer H.26…6.5
• CVE-2026-53703A vulnerability was found in the GStreamer RealMedia demuxer…7.1
• CVE-2026-53704A flaw was found in GStreamer's RealMedia demuxer in the gst…7.1
• CVE-2026-53705A flaw was found in GStreamer's WavPack audio decoder in gst…7.6
• CVE-2026-53706PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstr…8.8
• CVE-2026-53708ContextForge is an AI gateway, registry, and proxy that prov…6.6
• CVE-2026-5371The MonsterInsights – Google Analytics Dashboard for WordPre…7.1
• CVE-2026-53710MCP Context Forge is an AI gateway, registry, and proxy for …10
• CVE-2026-53711MCP Context Forge provides an MCP Admin UI for managing gate…5.1
• CVE-2026-53712SCRAM (Salted Challenge Response Authentication Mechanism) i…8.2
• CVE-2026-53713Envoy Gateway is an open source project for managing Envoy P…9.1
• CVE-2026-53714Envoy Gateway is an open source project for managing Envoy P…7.4