AIKIDO-2026-311794
mcp-contextforge-gateway is vulnerable to Improper Authorization
64
Medium Risk
This Affects:
mcp-contextforge-gatewayTL;DR
The OAuth Dynamic Client Registration management endpoints check only for administrator status and ignore the team-scope restrictions carried by scoped admin tokens. A narrowed admin token can list, retrieve, and delete OAuth clients registered outside its permitted teams. This exposes globally registered client records and allows their deletion beyond the intended authorization boundary. The fix enforces the token's team scope on these endpoints.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you issue team-scoped admin tokens and use OAuth Dynamic Client Registration.
Background info
mcp-contextforge-gateway is vulnerable to Improper Authorization in versions 0.0.1 - 1.0.6.
How to fix this
Upgrade the mcp-contextforge-gateway library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.