CVE-2026-53709 - MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery
CVE ID :CVE-2026-53709 Published : Oct. 13, 2026, 3:17 p.m. | 14 minutes ago Description :MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() accepts HS256 tokens signed...