SB20261110273 - Multiple vulnerabilities in MCP Gateway

Description

This security bulletin contains information about 2 vulnerabilities.

1) Uncaught Exception (CVE-ID: N/A)

CWE-ID: CWE-248 - Uncaught Exception

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service by terminating Docker MCP Gateway and disconnecting its clients.

The vulnerability exists due to an uncaught panic in the gateway's capability reload paths when unvalidated downstream resource URIs reach the MCP Go SDK's AddResource method during startup, configuration reload, or runtime capability refresh. A remote attacker can control or compromise an enabled downstream MCP server and return a resources/list response containing a malformed Resource.URI, such as %, to crash the gateway.

2) Improper Handling of Case Sensitivity (CVE-ID: N/A)

CWE-ID: CWE-178 - Improper Handling of Case Sensitivity

CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to receive arguments intended for built-in Docker MCP Gateway control-plane tools.

The vulnerability exists due to improper handling of case sensitivity in validateToolNameCollisions and isToolEnabled when checking tool-name collisions and allowlist entries. A remote attacker can expose a case variant of a reserved tool name through an operator-enabled, attacker-controlled MCP server to intercept arguments when a connected client selects the look-alike tool.

Remediation

Install update from vendor's website.

References

• https://github.com/docker/mcp-gateway/security/advisories/GHSA-jfp6-4vv7-6m6c
• https://github.com/docker/mcp-gateway/security/advisories/GHSA-qg99-jrvf-j9fh