CVE-2026-53710: sandbox escape in IBM mcp-context-forge rated 10.0
IBM mcp-context-forge before 1.0.2 contains CVE-2026-53710 (CVSS 10.0): a raw getattr reference in safe_builtins lets code in python_sandbox_server escape the sandbox and spawn processes via subprocess.Popen. The execute_code endpoint is reachable over HTTP and SSE without authentication; the fix is upgrading to 1.0.2.
- CVSS 10.0: remote unauthenticated sandbox escape
- Versions before 1.0.2 are affected
- execute_code endpoint exposed via HTTP and SSE without auth
- Fix: upgrade to 1.0.2 and isolate code execution
Read next
Security