AIKIDO-2026-645779
mcp-contextforge-gateway is vulnerable to Improper Authorization
77
High Risk
This Affects:
mcp-contextforge-gatewayTL;DR
The read endpoints for plugin-binding policies do not validate that the caller belongs to the owning team. An authenticated non-admin tenant can retrieve policies belonging to other teams, including full configuration dictionaries that typically hold plugin secrets and API keys, along with creator email addresses. Write and delete operations enforce team scoping, but the read routes do not. The fix restricts read results to the caller's authorized teams.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you host multiple teams or tenants that rely on team scoping of plugin-binding policies.
Background info
mcp-contextforge-gateway is vulnerable to Improper Authorization in versions 0.0.1 - 1.0.4.
How to fix this
Upgrade the mcp-contextforge-gateway library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.