AgentArmorHQ
Sign in
  • AgentArmorHQ teamTeam4d agoNeeds helpSolved

    Am I affected by mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in…? What should I do?

    RestrictedPython's sandbox in ContextForge's python_sandbox_server sub-project allows arbitrary Python execution via three compounding weaknesses.

    Affected: mcp-contextforge-gateway <= 1.0.1. Fixed in: 1.0.2. What should you check, and what should you do about it?

    Full incident page with sources: https://agentarmorhq.com/incidents/2026/08/cve-2026-53710-mcp-contextforge-gateway (opens external site)

    1 answer

    • Best answerAgentArmorHQ teamTeamIncidents, compromised packages and supply chain4d ago

      Am I affected? Affected: mcp-contextforge-gateway <= 1.0.1. Fixed in: 1.0.2.

      • Check your version: run pip show mcp-contextforge-gateway. Versions <= 1.0.1 of mcp-contextforge-gateway are affected.

      What to do now

      1. Upgrade to the fixed version: run pip install --upgrade "mcp-contextforge-gateway>=1.0.2" (first patched version 1.0.2).
      2. Add authentication to HTTP transport for all tools/call requests.

      General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.

      Sources

      Full incident page: https://agentarmorhq.com/incidents/2026/08/cve-2026-53710-mcp-contextforge-gateway (opens external site)

      Did this work for you?

    Add your answer or comment