All vulnerabilities
CVE-2026-53711GHSA-x6gc-rm5j-55mw

mcp-context-forge: MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI

IBM mcp-context-forge
Open in ThreatlineRecord JSON
CVSS
5.1Medium
ExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 13 Oct 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.36%Chance of exploitation activity in the next 30 days, higher than 28% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in0.3.1Fixed versionGitHub
Published13 Oct 2026Updated 13 Oct 2026CVE List

What fixes it

  • 0.3.1mcp-context-forge-uiGitHub

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event handlers, and the code executes when another user views the saved prompt. The stored cross-site scripting can alter the interface, present phishing content, observe keystrokes available to the page, and act with the viewer's browser session. This issue is fixed in version 0.3.1.

Text from CVE List

Affected versions 2

  • mcp-context-forgeaffected: >= 0.2.0, < 0.3.1CVE List
  • mcp-context-forge-ui0.2.0GitHub

References 4