mcp-gateway vulnerabilities

2 known vulnerabilities in mcp-gateway from Docker. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  mcp-gateway: Improper Neutralization of Argument Delimiters in a Command

  CVE-2026-55887Sep 15, 2026Docker

  MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway YAML-unmarshalled the attacker-controlled io.docker.server.metadata OCI image label into the broad catalog.Server structure for direct docker

• 9.6 Critical severity

  mcp-gateway: Exposed Dangerous Method or Function

  CVE-2025-64443Dec 3, 2025Docker

  MCP Gateway allows easy and secure running and deployment of MCP servers. In versions 0.27.0 and earlier, when MCP Gateway runs in sse or streaming transport mode, it is vulnerable to DNS rebinding. An attacker who can get a victim to visit a malicious website