Topic

Cve 2026 53709

Coverage tagged cve 2026 53709.

Articles: 1
Desk: 1

Poster: forged admin token via default JWT key in IBM MCP Context Forge, CVE-2026-53709, CVSS 9.8

highAI Security Cve 2026 53709

IBM MCP Context Forge's Default JWT Key Let Anyone Forge Admin Tokens (CVE-2026-53709)

MCP Context Forge up to 1.0.1 shipped a known default JWT signing key. With default admin settings, an unauthenticated attacker could gain platform admin. CVSS 9.8; fixed in 1.0.2.

Oct 14 · 7 min