THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-vwf3-4xxj-qg6h (high) — mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment

[GHSA] GHSA-vwf3-4xxj-qg6h (high) — mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment

medgithub_advisoriesPublished 2026-08-25

GHSA-vwf3-4xxj-qg6h Severity: high CVE: None

mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment

### Summary

`mcpgateway.services.prompt_service.PromptService` renders user-supplied prompt templates using Jinja2's plain `Environment()` rather than `SandboxedEnvironment`. An aut

MITRE ATT&CK techniques

CredentialsT1589.001
Template InjectionT1221
Reverse ShellAML.T0072

Original source: https://github.com/advisories/GHSA-vwf3-4xxj-qg6h