Detections
Analytics

SCA: security update for mcp-contextforge-gateway (GHSA-9hgc-g3w5-67cm)

medium Tenable Self-Hosted Container Security Plugin ID 445981

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and
 management for MCP, A2A, and REST or gRPC APIs. Prior to 1.0.3, the /admin/gateways/test call site in
 mcpgateway/admin.py calls validate_gateway_test_url() in mcpgateway/common/validators.py to resolve and
 reject private, loopback, link-local, and cloud-metadata addresses, but ResilientHttpClient later resolves
 the original hostname again without binding the validated address. When MCPGATEWAY_ADMIN_API_ENABLED is
 enabled, an attacker with a database-backed role containing explicit gateways.read permission can use DNS
 rebinding to return a public address during validation and a private or metadata address during
 connection, bypassing ssrf_blocked_networks and ssrf_dns_fail_closed because those controls apply only to
 the validation-time result. The endpoint's allow_admin_bypass=False setting means a bootstrap-only virtual
 platform-admin identity without a database role is not sufficient. Successful exploitation can reach
 internal services and cloud metadata, expose cloud credentials, access internal APIs, or probe internal
 network ports. This issue is fixed in version 1.0.3. (CVE-2026-53708)

Solution

Update the mcp-contextforge-gateway library and its related packages to version 1.0.3 or later.

See Also

https://github.com/advisories/GHSA-9hgc-g3w5-67cm

Plugin Details

Severity: Medium

ID: 445981

Version: Revision 1.3

Type: Local

Family: SCA Checks

Published: 8/15/2026

Updated: 9/15/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3.9

Percentile: 52.66

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 5.3

Temporal Score: 3.9

Vector: CVSS2#AV:N/AC:H/Au:M/C:C/I:P/A:N

CVSS Score Source: CVE-2026-53708

CVSS v3

Risk Factor: Medium

Base Score: 6.6

Temporal Score: 5.8

Vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 8/14/2026

Vulnerability Publication Date: 8/14/2026

Reference Information

CVE: CVE-2026-53708