---
id: CVE-2026-53711
title: MCP Context Forge provides an MCP Admin UI for managing gateway resources
summary: >-
  MCP Context Forge provides an MCP Admin UI for managing gateway resources.
  From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template
  without sufficient output encoding before the MCP Admin UI renders it. An
  authenticate…
severity: none
cwe:
  - CWE-79
published: '2026-10-13'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T16:17:21.167'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-53711'
references:
  - url: >-
      https://github.com/IBM/mcp-context-forge/commit/acd16196158f9a393187551b21a2fc61650f2e3d
    label: security-advisories@github.com
  - url: 'https://github.com/IBM/mcp-context-forge/pull/337'
    label: security-advisories@github.com
  - url: 'https://github.com/IBM/mcp-context-forge/releases/tag/v0.3.1'
    label: security-advisories@github.com
  - url: >-
      https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-x6gc-rm5j-55mw
    label: security-advisories@github.com
  - url: >-
      https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-x6gc-rm5j-55mw
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
ingestedAt: '2026-10-13T15:33:40.079Z'
---

## Overview

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event handlers, and the code executes when another user views the saved prompt. The stored cross-site scripting can alter the interface, present phishing content, observe keystrokes available to the page, and act with the viewer's browser session. This issue is fixed in version 0.3.1.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.