CVE-2026-53710

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-53710

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53710.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-53710

Aliases

Published

2026-09-15T16:47:41Z

Modified

2026-09-17T03:47:22Z

Severity

10.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator

Summary

MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

Details

MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sandbox_server in mcp-servers/python/python_sandbox_server/src/python_sandbox_server/server_fastmcp.py exposes raw getattr through safe_builtins, omits a required getattr guard, and relies on validate_code checks for literal dangerous dunder strings. An attacker can construct dunder names at runtime, traverse the Python class hierarchy, reach subprocess.Popen, and execute OS commands with the server process privileges through the execute_code MCP tool. The HTTP/SSE transport can expose this tool without authentication, while stdio-only deployments have reduced network reachability. The issue affects the python_sandbox_server subproject and does not directly affect the core Context Forge gateway or proxy components. This issue is fixed in version 1.0.2.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-693",
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53710.json"
}

References

Affected packages

Git / github.com/ibm/mcp-context-forge

Affected ranges

Type

GIT

Repo

https://github.com/ibm/mcp-context-forge

Events

Introduced

Fixed

63a2900e6301b9c8a483a38d3737a1beb3a7ce89

Fixed

e0967e65cd381374682751da630e2cc2fb3a9c34

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.0.2"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v1.*

v1.0.0

v1.0.0-RC-3

v1.0.0-RC2

v1.0.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53710.json"