Product by IBM
Mcp-context-forge
4 known vulnerabilities in Mcp-context-forge (IBM), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-53710 | MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server | 10.0 | |
| Critical | CVE-2026-53709 | IBM Mcp-context-forge: Use of Hard-coded Cryptographic Key | 9.8 | |
| Medium | CVE-2026-53708 | ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`) | 6.6 | |
| Medium | CVE-2026-53711 | MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI | — |