CVE-2026-53709 | IBM MCP Context Forge up to 1.0.1 mcpgateway/config.py verify_jwt_token JWT_SECRET_KEY information disclosure

October 13, 2026 Yanac

A vulnerability identified as problematic has been detected in IBM MCP Context Forge up to 1.0.1. This affects the function verify_jwt_token of the file mcpgateway/config.py. This manipulation of the argument JWT_SECRET_KEY causes information disclosure.

This vulnerability is tracked as CVE-2026-53709. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More