Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-53711— MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI

Quick assessment

Affected
IBM mcp-context-forge
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

MCP Context Forge 提供了一个 MCP Admin UI（管理界面），用于管理网关资源。从版本 0.2.0 到 0.3.1，其“全局提示词（Global Prompts）”功能在将提示词模板传递给 MCP Admin UI 进行渲染之前，未对输出进行充分的编码处理。经过身份验证的攻击者可以保存包含可执行脚本的事件处理器的标记（markup），当其他用户查看该已保存的提示词时，恶意代码便会执行。 这种存储型跨站脚本漏洞（Stored Cross-Site Scripting, XSS）可能篡改页面界面

CVSS 5.1 · Medium EPSS 0.36% · P29

Possible ATT&CK Techniques 1 AI

T1189 · Drive-by Compromise

Affected Version Matrix 1

VendorProduct Version RangeStatus
IBM mcp-context-forge >= 0.2.0, < 0.3.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-53711

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI
Source: CVE Program / CVE List V5
Vulnerability Description
MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event handlers, and the code executes when another user views the saved prompt. The stored cross-site scripting can alter the interface, present phishing content, observe keystrokes available to the page, and act with the viewer's browser session. This issue is fixed in version 0.3.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
IBM mcp-context-forge >= 0.2.0, < 0.3.1 -

II. Public POCs for CVE-2026-53711

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-53711

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-53711 (2)

Vendor Advisories for CVE-2026-53711 (1)

Vendor Pages for CVE-2026-53711 (1)

Same Patch Batch · IBM · 2026-10-13 · 18 CVEs total

CVE-2026-53709 9.8 CRITICAL MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example ena
CVE-2026-93909 9.1 CRITICAL IBM WebSphere Application Server Liberty is affected by an authentication bypass
CVE-2026-93895 9.1 CRITICAL IBM WebSphere Application Server Liberty Improper Access Control
CVE-2026-101294 8.7 HIGH IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by
CVE-2026-93905 8.2 HIGH IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted dat
CVE-2026-105443 8.2 HIGH IBM WebSphere Application Server Liberty is affected by an improper access control
CVE-2026-93907 8.1 HIGH IBM WebSphere Application Server is affected by a bypass authentication vulnerability
CVE-2026-95680 8.0 HIGH IBM WebSphere Application Server is affected by an authorization bypass
CVE-2026-103499 7.5 HIGH IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by
CVE-2026-105442 7.5 HIGH IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by
CVE-2026-95695 7.4 HIGH IBM WebSphere Application Server Liberty Incorrect Authorization
CVE-2026-14909 6.5 MEDIUM IBM WebSphere Application Server Liberty Information Disclosure
CVE-2026-77816 6.5 MEDIUM IBM WebSphere Application Server Liberty Improper Certificate Validation
CVE-2026-95696 6.5 MEDIUM IBM WebSphere Application Server Liberty Denial of Service
CVE-2026-79715 5.5 MEDIUM IBM WebSphere Application Server Liberty Path Traversal
CVE-2026-11713 5.4 MEDIUM IBM WebSphere Application Server Liberty Incorrect Authorization
CVE-2026-14532 4.3 MEDIUM IBM WebSphere Application Server Liberty Integer Overflow

IV. Related Vulnerabilities

Same product: mcp-context-forge
Same vendor: IBM
Same weakness: CWE-79

V. Comments for CVE-2026-53711

No comments yet

Leave a comment