PT-2026-45070 · Go · Github.Com/Kuadrant/Mcp-Gateway

Publicado 2026-05-19 · Atualizado 2026-05-19

OSV

CVSS v4.0

9.3

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Summary

The MCP router (ext proc) exposes an initialize-method code path that, when a request carries an mcp-init-host header, bypasses the gateway JWT session validator and rewrites the upstream :authority header to whatever the caller chooses, gated only by a single shared header value (router-key). The shared value is

• a literal string (secret-api-key) baked into cmd/mcp-broker-router/main.go as a fall-back default, and
• in controller-managed deployments, a SHA-256 truncation of the MCPGatewayExtension UID — a non-secret value visible to anyone with get permission on the resource, and additionally exposed in argv because it is passed to the broker-router container via --mcp-router-key=....

A request that satisfies the trivial header check is forwarded to any backend listener registered with the gateway (including external services such as api.githubcopilot.com when configured), bypassing both the broker (where the signed x-mcp-authorized capability filter is enforced) and the gateway's JWT-based session model.

Correção

Origin Validation Error

IDOR

Improper Authentication

Enumeração de Fraquezas

CWE-346

CWE-639

CWE-287

Identificadores relacionados

GHSA-G53W-W6MJ-HRPP

Produtos afetados

Github.Com/Kuadrant/Mcp-Gateway

Referências · 3

• https://github.com/Kuadrant/mcp-gateway · Nota
• https://github.com/Kuadrant/mcp-gateway/security/advisories/GHSA-g53w-w6mj-hrpp · Nota
• https://osv.dev/vulnerability/GHSA-g53w-w6mj-hrpp · Aviso do Fabricante