Secuno
ENNL
Book demo

CVE-2026-53710

10.0 CRITICAL
  1. Published15 Sept 2026

Description

MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sandbox_server in mcp-servers/python/python_sandbox_server/src/python_sandbox_server/server_fastmcp.py exposes raw getattr through safe_builtins, omits a required _getattr_ guard, and relies on validate_code checks for literal dangerous dunder strings. An attacker can construct dunder names at runtime, traverse the Python class hierarchy, reach subprocess.Popen, and execute OS commands with the server process privileges through the execute_code MCP tool. The HTTP/SSE transport can expose this tool without authentication, while stdio-only deployments have reduced network reachability. The issue affects the python_sandbox_server subproject and does not directly affect the core Context Forge gateway or proxy components. This issue is fixed in version 1.0.2.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-587048.0
In Cellular Modem, there is a possible permission bypass due to a logic error in the…
CVE-2026-919499.3
FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass…
CVE-2026-571419.8
PraisonAI is a multi-agent teams system. Prior to 1.7.2, the codeMode tool in…
CVE-2026-571389.9
PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in…
CVE-2026-571378.8
PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in…
CVE-2026-571368.8
PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, CommandValidator in…

Frequently asked

Is CVE-2026-53710 being actively exploited?

CVE-2026-53710 is not in the CISA KEV catalog.

How severe is CVE-2026-53710?

CVE-2026-53710 has a CVSS 3.1 base score of 10.0, rated critical.

How do I fix CVE-2026-53710?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-53710 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.