PT-2025-48968 · Unknown · Mcp-Gateway

Published 2025-12-03 · Updated 2026-03-10 · CVE-2025-64443

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MCP Gateway versions prior to 0.28.0

Description MCP Gateway, used for running and deploying MCP servers, is susceptible to DNS rebinding when operating in sse or streaming transport mode. An attacker can exploit this by tricking a user into visiting a malicious website or being served a malicious advertisement, potentially allowing browser-based exploitation of MCP servers behind the gateway. This could include manipulation of tools or features exposed by those servers. The gateway is not affected when running in the default stdio mode, which does not listen on network ports.

Recommendations Update to version 0.28.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-749

Related Identifiers

CVE-2025-64443

GHSA-46GC-MWH4-CC5R

GO-2025-4179

SUSE-SU-2025:4395-1

Affected Products

Mcp-Gateway

References · 53

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64443.json · Exploit
• https://github.com/docker/mcp-gateway/commit/6b076b2479d8d1345c50c112119c62978d46858e · Patch
• https://github.com/docker/mcp-gateway/security/advisories/GHSA-46gc-mwh4-cc5r · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64443 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4395-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64443 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-4179 · Vendor Advisory
• https://github.com/docker/mcp-gateway/pull/190 · Note
• https://github.com/docker/mcp-gateway/commit/fe073985c8eb6e0c9317d2f198c07686f70ea06d · Note
• https://suse.com/security/cve/CVE-2025-61729 · Note
• https://suse.com/security/cve/CVE-2017-18871 · Note
• https://suse.com/security/cve/CVE-2017-18883 · Note
• https://suse.com/security/cve/CVE-2025-64751 · Note
• https://suse.com/security/cve/CVE-2025-65111 · Note
• https://suse.com/security/cve/CVE-2018-21258 · Note