Vulnerability Intelligence Report
MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI
CVE-2026-53711
MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event handlers, and the code executes when another user views the saved prompt. The stored cross-site scripting can alter the interface, present phishing content, observe keystrokes available to the page, and act with the viewer's browser session. This issue is fixed in version 0.3.1.
Cross-Site Scripting (XSS)
No Active Exploit Signals
CVSS Base Score
5.1
MEDIUM
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-79 ↗CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| IBM | mcp-context-forge | >= 0.2.0, < 0.3.1 (affected) |
Threat Intelligence Signals
Vulnerability Class
Cross-Site Scripting (XSS)
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | GitHub, Inc. · Vendor · USA |
| Reserved | 2026-06-10T16:43:31 |
| Published | 2026-10-13T14:34:01 |
| Last Updated | 2026-10-13T15:48:27 |
Community Chatter & Buzz