CVE-2026-53709 Details
Description
MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() accepts HS256 tokens signed with that key and get_current_user() creates a platform administrator when the token subject matches PLATFORM_ADMIN_EMAIL and REQUIRE_USER_IN_DB is false. A remote unauthenticated attacker can therefore mint accepted administrator tokens without a database account. While the vulnerable signing key remains configured and the platform-admin bootstrap remains enabled, forged access survives password rotation, account deletion, and session revocation, allowing administrative disclosure, modification, and service disruption. This issue is fixed in version 1.0.2.
A vulnerability in MCP Context Forge versions prior to 1.0.2 allows remote, unauthenticated attackers to forge JWTs that are accepted as valid administrator tokens. This is possible because the application ships with a hardcoded, weak JWT secret key that can be easily exploited. The vulnerability arises from improper authentication and insecure default initialization, as the application does not verify the existence of a user in the database before granting admin privileges. Exploitation of this vulnerability bypasses normal authentication processes and persists through account deletions and password changes, leading to unauthorized administrative access.
Users should update to MCP Context Forge version 1.0.2 or later, where this vulnerability has been fixed. Additionally, ensure that the JWT secret key is set to a strong, unique value before deploying the application.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 13, 2026CISA-ADP
Assessed Oct 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/IBM/mcp-context-forge/commit/2af690f894b6e35f5f21190fdab1505f023a5272 | [email protected] | Source CodeVendor |
| https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.2 | [email protected] | Release NotesVendor |
| https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-m8rv-5m6m-32ff | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1188 | Initialization of a Resource with an Insecure Default | [email protected] |
| CWE-287 | Improper Authentication | [email protected] |
| CWE-321 | Use of Hard-coded Cryptographic Key | [email protected] |
| CWE-798 | Use of Hard-coded Credentials | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| IBM MCP Context Forge | <= 1.0.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 16, 2026 | CVE Modified | CISA-ADP |
| Oct 13, 2026 | New CVE Received | [email protected] |