{"vulnerability": "GHSA-VWF3-4XXJ-QG6H", "sightings": [{"uuid": "0fded31d-6fb9-4a72-aae7-d1f3dc05271a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-vwf3-4xxj-qg6h", "type": "seen", "source": "https://bsky.app/profile/kyisaiah47.kynth.studio/post/3mtweqps6u22t", "content": "https://github.com/advisories/GHSA-vwf3-4xxj-qg6h", "creation_timestamp": "2026-08-25T17:46:07.012935Z"}, {"uuid": "8f0e9d3c-15a0-4eb2-bc40-021142c3a9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-VWF3-4XXJ-QG6H", "type": "seen", "source": "https://gist.github.com/alon710/e486edf9fad254ea700b7883cbb95dbf", "content": "# GHSA-VWF3-4XXJ-QG6H: GHSA-VWF3-4XXJ-QG6H: Server-Side Template Injection in mcp-contextforge-gateway\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/GHSA-VWF3-4XXJ-QG6H\n\n## Summary\nA Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) was discovered in the mcp-contextforge-gateway package before version 1.0.0. The vulnerability stems from an unsandboxed Jinja2 template rendering environment combined with an unsafe fallback mechanism using Python's native str.format() function. Attackers with template modification access could bypass static regex filters to execute arbitrary commands on the hosting platform.\n\n## TL;DR\nUnsandboxed Jinja2 rendering and an unsafe str.format() fallback in mcp-contextforge-gateway prior to v1.0.0 permit remote code execution via crafted prompt templates.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1336, CWE-94\n- **Attack Vector**: Network (with template registration privileges)\n- **CVSS v3.1 Score**: 9.8 (Critical)\n- **Exploit Status**: Proof-of-Concept\n- **Patch Status**: Patched in v1.0.0\n- **Vulnerability Class**: Server-Side Template Injection (SSTI)\n\n## Affected Systems\n\n- mcp-contextforge-gateway < 1.0.0\n- mcp-context-forge integrations utilizing prompt_service templates < 1.0.0\n- **mcp-contextforge-gateway**: < 1.0.0 (Fixed in: `1.0.0`)\n\n## Mitigation\n\n- Upgrade mcp-contextforge-gateway to version 1.0.0 or higher.\n- Ensure environment-level template validation variables are enabled.\n- Enforce strict network segmentation and access controls on prompt management endpoints.\n\n**Remediation Steps:**\n1. Check installed package version using pip show mcp-contextforge-gateway.\n2. Run pip install --upgrade mcp-contextforge-gateway>=1.0.0.\n3. Configure CONTENT_VALIDATE_PROMPT_TEMPLATES=true in environment configuration.\n4. Restart the gateway service to load the secure configuration.\n\n## References\n\n- [GitHub Advisory Database Entry](https://github.com/advisories/GHSA-VWF3-4XXJ-QG6H)\n- [mcp-context-forge v1.0.0 Release Notes](https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-VWF3-4XXJ-QG6H) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-25T18:31:43.904418Z"}]}