CVE-2025-64443

Critical · 9.6

CVSS

9.6

EPSS

0.4%

Published

Dec 3, 2025

CISA due date

—

The record

MCP Gateway allows easy and secure running and deployment of MCP servers. In versions 0.27.0 and earlier, when MCP Gateway runs in sse or streaming transport mode, it is vulnerable to DNS rebinding. An attacker who can get a victim to visit a malicious website or be served a malicious advertisement can perform browser-based exploitation of MCP servers executing behind the gateway, including manipulating tools or other features exposed by those MCP servers. MCP Gateway is not affected when running in the default stdio mode, which does not listen on network ports. Version 0.28.0 fixes this issue.

Affected packages

Ecosystem	Package	Fixed
Go	github.com/docker/mcp-gateway	0.28.0
SUSE:Linux Enterprise Module for Package Hub 15 SP6	govulncheck-vulndb	0.0.20251209T172047-150000.1.127.1
openSUSE:Leap 15.6	govulncheck-vulndb	0.0.20251209T172047-150000.1.127.1

Related vulnerabilities

GO-2025-4179 Docker MCP Plugin and Docker MCP Gateway have DNS Rebinding vulnerability when running in… Same vulnerability
CVE-2025-44005 An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner… Also affects govulncheck-vulndb
CVE-2025-66564 Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Also affects govulncheck-vulndb
CVE-2025-66506 Fulcio is a free-to-use certificate authority for issuing code signing certificates for… Also affects govulncheck-vulndb
CVE-2025-66411 Coder allows organizations to provision remote development environments via Terraform. Also affects govulncheck-vulndb
CVE-2025-66406 Step CA is an online certificate authority for secure, automated certificate management… Also affects govulncheck-vulndb
CVE-2025-64750 SingularityCE and SingularityPRO are open source container platforms. Also affects govulncheck-vulndb
CVE-2025-65105 Apptainer ineffective application of selinux and apparmor --security options Also affects govulncheck-vulndb