CVE-2026-53710Patch

MEDIUMCVSS 10.0 · CRITICAL

Exploitation observed; activity peaked at 3 mentions and remains active

Immediate actions

Patch affected systems immediately
Assume compromise if assets are exposed
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: Immediate (within 24h)

NVD description

MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sandbox_server in mcp-servers/python/python_sandbox_server/src/python_sandbox_server/server_fastmcp.py exposes raw getattr through safe_builtins, omits a required _getattr_ guard, and relies on validate_code checks for literal dangerous dunder strings. An attacker can construct dunder names at runtime, traverse the Python class hierarchy, reach subprocess.Popen, and execute OS commands with the server process privileges through the execute_code MCP tool. The HTTP/SSE transport can expose this tool without authentication, while stdio-only deployments have reduced network reachability. The issue affects the python_sandbox_server subproject and does not directly affect the core Context Forge gateway or proxy components. This issue is fixed in version 1.0.2.

Back to dashboard

5.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-94CWE-693

Priority

MEDIUM

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Active exploitation appears in 1 classified signals
Public PoC is present in monitored signal
Patch or workaround signal is available
7 mentions across 5 observed days

What's happening

Active exploitation reported across 1 signal
PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 4 signals
Technical details provided in 6 signals
Disclosure: 2 classified signals
Peaked 4d ago at 3 mentions (2026-09-16); latest day: 1
7 total mentions across 5 days

Deep dive

Activity timeline7 mentions / 5d

Signal classification4 categories

Patch

342.9%

Disclosure

228.6%

PoC

114.3%

Active Exploitation

114.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-16	3	Disclosure1Patch1PoC1
2026-09-20	1	Patch1
2026-09-25	1	Disclosure1
2026-10-15	1	Patch1
2026-10-16	1	Active Exploitation1

Full discourse7 posts

CCB Alert@CCBalert46d
Patch
Warning: A critical code injection vulnerability in #IBM mcp-context-forge allows unauthenticated attackers to run arbitrary OS commands. #RCE #CVE-2026-53710 CVSS(3.1): 10.0. Read the advisory https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-xm98-3vcf-fph7 and #Patch #Patch #Patch
Post summary
The tweet warns of a critical code injection RCE vulnerability (CVE-2026-53710, CVSS 10.0) in IBM mcp-context-forge and directs users to the GitHub security advisory, urging them to apply the patch.
12010341
7.3K followersView on X
Neuro@neurometax17d
Active Exploitation
📡 ON THE WIRE Three of these are live fire, so pay attention. 🚨 Langflow, CVE-2026-105740, CVSS 9.9, actively exploited as of last night. Attackers injecting commands through MCP stdio that turn into straight bash execution, 1,423 honeypot hits counted, per The Hacker News. Anything in our orbit running Langflow patches to 1.9.0+ TODAY, not next sprint. NetLicensing's MCP server got CVE-2026-57496, path traversal slipping past token redaction, fixed in 0.1.8. IBM's mcp-context-forge caught CVE-2026-53710
Post summary
The tweet reports three actively exploited CVEs (Langflow CVE-2026-105740, NetLicensing CVE-2026-57496, IBM mcp-context-forge CVE-2026-53710) with technical details and urgent patching directives, citing live-fire exploitation and honeypot evidence.
0001068
6.6K followersView on X
Kaitan ID Security@KaitanSecurity37d
Disclosure
🛡️ AI Gateway and Dell ObjectScale: Unauthenticated RCE at Scale CVE-2026-53710 targets MCP Context Forge, an AI gateway and proxy for MCP, A2A, REST, and gRPC APIs — a class of infrastructure that barely existed two years ago but is now…
Post summary
The tweet announces CVE-2026-53710, an unauthenticated RCE affecting the MCP Context Forge AI gateway, but provides no PoC, exploit code, patch, or evidence of active exploitation.
1000047
91 followersView on X
ExploitGrid@exploitgrid46d
PoC
[CVE] CVE-2026-53710 [HIGH PRIORITY] #MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in pyt... 🔗 https://exploitgrid.net/cve/CVE-2026-53710
Post summary
The tweet highlights a high‑priority sandbox bypass vulnerability (CVE‑2026‑53710) in MCP Context Forge, provides technical description, and points to a PoC/exploit link.
1000048
45 followersView on X
ExploitGrid@exploitgrid46d
Disclosure
🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-53710 CVE-2026-59971 CVE-2026-71133 CVE-2026-83020 CVE-2026-83021 ..🧵👇
Post summary
The tweet serves as a daily threat digest announcing several CVE identifiers as top vulnerabilities without providing technical details, proof of concepts, exploit code, or patching information.
1000081
45 followersView on X
Bitsquin@bitsquin17d
Patch
SECURITY: CVE-2026-53710 exposes a critical CVSS 10.0 vulnerability in IBM's mcp-context-forge before version 1.0.2.
Post summary
The text announces CVE-2026-53710 as a critical CVSS 10.0 vulnerability in IBM's mcp-context-forge and specifies that versions before 1.0.2 are affected, indicating 1.0.2 as the remediated release.
0000032
14 followersView on X
SecAlerts@SecAlertsCo42d
Patch
🔓 IBM MCP Context Forge: RestrictedPython sandbox bypassed via getattr builtin in python_sandbox_server. CVSS 10, no auth needed, full RCE scope. Patch to v1.0.2 now. CVE-2026-53710 #cybersecurity #ciso #vulnerabilities https://secalerts.co/vulnerability/CVE-2026-53710?utm_campaign=x https://t.co/rC9HD4CG0w
Post summary
The tweet discloses a critical RCE vulnerability (CVE-2026-53710) in IBM MCP Context Forge caused by a RestrictedPython sandbox bypass and explicitly urges users to patch to version 1.0.2.
0000078
889 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-53710

Neuro[verified]@neurometaxActive Exploitation

The tweet reports three actively exploited CVEs (Langflow CVE-2026-105740, NetLicensing CVE-2026-57496, IBM mcp-context-forge CVE-2026-53710) with technical details and urgent patching directives, citing live-fire exploitation and honeypot evidence.

Kaitan ID Security[verified]@KaitanSecurityDisclosure

The tweet announces CVE-2026-53710, an unauthenticated RCE affecting the MCP Context Forge AI gateway, but provides no PoC, exploit code, patch, or evidence of active exploitation.

CCB Alert@CCBalertPatch

The tweet warns of a critical code injection RCE vulnerability (CVE-2026-53710, CVSS 10.0) in IBM mcp-context-forge and directs users to the GitHub security advisory, urging them to apply the patch.

ExploitGrid@exploitgridPoC

The tweet highlights a high‑priority sandbox bypass vulnerability (CVE‑2026‑53710) in MCP Context Forge, provides technical description, and points to a PoC/exploit link.

ExploitGrid@exploitgridDisclosure

The tweet serves as a daily threat digest announcing several CVE identifiers as top vulnerabilities without providing technical details, proof of concepts, exploit code, or patching information.

Bitsquin@bitsquinPatch

The text announces CVE-2026-53710 as a critical CVSS 10.0 vulnerability in IBM's mcp-context-forge and specifies that versions before 1.0.2 are affected, indicating 1.0.2 as the remediated release.

SecAlerts@SecAlertsCoPatch

The tweet discloses a critical RCE vulnerability (CVE-2026-53710) in IBM MCP Context Forge caused by a RestrictedPython sandbox bypass and explicitly urges users to patch to version 1.0.2.