CVE-2026-53711 Details
Description
MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event handlers, and the code executes when another user views the saved prompt. The stored cross-site scripting can alter the interface, present phishing content, observe keystrokes available to the page, and act with the viewer's browser session. This issue is fixed in version 0.3.1.
A stored cross-site scripting vulnerability has been identified in MCP Context Forge versions 0.2.0 prior to 0.3.1. The issue arises in the Global Prompts feature, which fails to properly encode output before rendering in the MCP Admin UI. This allows authenticated attackers to inject markup with script-capable event handlers, executing the injected code when other users view the saved prompt. The vulnerability can be exploited to deface the UI, present phishing content, log keystrokes, and act within the user's browser session.
Users can upgrade to MCP Context Forge version 0.3.1, where this vulnerability has been fixed. After upgrading, review and adjust security settings in the application's environment file to disable the Admin UI and Admin API in production.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 13, 2026CISA-ADP
Assessed Oct 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-x6gc-rm5j-55mw | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/IBM/mcp-context-forge/commit/acd16196158f9a393187551b21a2fc61650f2e3d | [email protected] | Source CodeVendor |
| https://github.com/IBM/mcp-context-forge/pull/337 | [email protected] | Source CodeVendor |
| https://github.com/IBM/mcp-context-forge/releases/tag/v0.3.1 | [email protected] | Release NotesVendor |
| https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-x6gc-rm5j-55mw | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| IBM MCP Context Forge | 0.2.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 13, 2026 | CVE Modified | CISA-ADP |
| Oct 13, 2026 | New CVE Received | [email protected] |