Skip to content
Threat Feed
Subscribe

Product

Mcp-Contextforge-Gateway

1 brief RSS
high advisory

Remote Code Execution via SSTI in mcp-contextforge-gateway

An authenticated Server-Side Template Injection (SSTI) vulnerability in mcp-contextforge-gateway version 0.9.0 and earlier allows attackers to achieve Remote Code Execution via unsandboxed Jinja2 template rendering.

mcp-contextforge-gateway ssti rce vulnerability
1r 1t