{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-14T00:13:30.936","vulnerabilities":[{"cve":{"id":"CVE-2026-53709","sourceIdentifier":"security-advisories@github.com","published":"2026-10-13T15:17:44.873","lastModified":"2026-10-13T15:17:44.873","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() accepts HS256 tokens signed with that key and get_current_user() creates a platform administrator when the token subject matches PLATFORM_ADMIN_EMAIL and REQUIRE_USER_IN_DB is false. A remote unauthenticated attacker can therefore mint accepted administrator tokens without a database account. While the vulnerable signing key remains configured and the platform-admin bootstrap remains enabled, forged access survives password rotation, account deletion, and session revocation, allowing administrative disclosure, modification, and service disruption. This issue is fixed in version 1.0.2."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"IBM","product":"mcp-context-forge","versions":[{"version":"< 1.0.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Primary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"CWE-321"},{"lang":"en","value":"CWE-798"},{"lang":"en","value":"CWE-1188"}]}],"references":[{"url":"https://github.com/IBM/mcp-context-forge/commit/2af690f894b6e35f5f21190fdab1505f023a5272","source":"security-advisories@github.com"},{"url":"https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.2","source":"security-advisories@github.com"},{"url":"https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-m8rv-5m6m-32ff","source":"security-advisories@github.com"}]}}]}