CVE-2025-64443
DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode
Reported by github_m · Published December 3, 2025
github.com/docker/mcp-gateway is fixed in 0.28.0 (Go Modules)
MCP Gateway allows easy and secure running and deployment of MCP servers. In versions 0.27.0 and earlier, when MCP Gateway runs in sse or streaming transport mode, it is vulnerable to DNS rebinding. An attacker who can get a victim to visit a malicious website or be served a malicious advertisement can perform browser-based exploitation of MCP servers executing behind the gateway, including manipulating tools or other features exposed by those MCP servers. MCP Gateway is not affected when running in the default stdio mode, which does not listen on network ports. Version 0.28.0 fixes this issue.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| github.com/docker/mcp-gateway | Go Modules | 0.28.0 |
| mcp_gateway | docker | 0.28.0 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| docker | mcp-gateway | < 0.28.0 |
| github.com | docker/mcp-gateway | 0 |
| docker | mcp-gateway | 0 |
Timeline
- Dec 3, 2025 CVE Published
- Dec 3, 2025 CVE Updated
- Dec 4, 2025 EPSS Score (30 in total, the first dated here)
- Mar 10, 2026 Security Advisory
- Mar 26, 2026 Coalition ESS Score (2 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2025-64443
vulnetix vdb fixes CVE-2025-64443Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-64443/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://github.com/docker/mcp-gateway/security/advisories/GHSA-46gc-mwh4-cc5r x_refsource_CONFIRM
- https://github.com/docker/mcp-gateway/commit/6b076b2479d8d1345c50c112119c62978d46858e x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2025-64443 advisory
- https://github.com/advisories/GHSA-46gc-mwh4-cc5r advisory
- https://github.com/docker/mcp-gateway/pull/190 patch
- https://github.com/docker/mcp-gateway/commit/fe073985c8eb6e0c9317d2f198c07686f70ea06d patch
- https://github.com/docker/mcp-gateway url
- https://modelcontextprotocol.io/specification/2025-06-18/basic/transports#security-warning url