CVE-2026-53710

MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sandbox_server in mcp-servers/python/python_sandbox_server/src/python_sandbox_server/server_fastmcp.py exposes raw getattr through safe_builtins, omits a required _getattr_ guard, and relies on validate_code checks for literal dangerous dunder strings. An attacker can construct dunder names at runtime, traverse the Python class hierarchy, reach subprocess.Popen, and execute OS commands with the server process privileges through the execute_code MCP tool. The HTTP/SSE transport can expose this tool without authentication, while stdio-only deployments have reduced network reachability. The issue affects the python_sandbox_server subproject and does not directly affect the core Context Forge gateway or proxy components. This issue is fixed in version 1.0.2.

• CWE-94
• CWE-693

• https://github.com/IBM/mcp-context-forge/commit/63a2900e6301b9c8a483a38d3737a1beb3a7ce89
• https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.2
• https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-xm98-3vcf-fph7

Published

Sep 15, 2026

Last Modified

Sep 15, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53703A vulnerability was found in the GStreamer RealMedia demuxer…7.1
• CVE-2026-53704A flaw was found in GStreamer's RealMedia demuxer in the gst…7.1
• CVE-2026-53705A flaw was found in GStreamer's WavPack audio decoder in gst…7.6
• CVE-2026-53706PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstr…8.8
• CVE-2026-53708ContextForge is an AI gateway, registry, and proxy that prov…6.6
• CVE-2026-5371The MonsterInsights – Google Analytics Dashboard for WordPre…7.1
• CVE-2026-53712SCRAM (Salted Challenge Response Authentication Mechanism) i…8.2
• CVE-2026-53713Envoy Gateway is an open source project for managing Envoy P…9.1
• CVE-2026-53714Envoy Gateway is an open source project for managing Envoy P…7.4
• CVE-2026-53715Envoy Gateway is an open source project for managing Envoy P…5.3
• CVE-2026-53716Envoy Gateway is an open source project for managing Envoy P…6.5
• CVE-2026-53717Envoy Gateway is an open source project for managing Envoy P…6.5