CVE-2025-64443 - CVE House
Back to Database
Status published High CVE-2025-64443

DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode

Vulnerability Description

MCP Gateway allows easy and secure running and deployment of MCP servers. In versions 0.27.0 and earlier, when MCP Gateway runs in sse or streaming transport mode, it is vulnerable to DNS rebinding. An attacker who can get a victim to visit a malicious website or be served a malicious advertisement can perform browser-based exploitation of MCP servers executing behind the gateway, including manipulating tools or other features exposed by those MCP servers. MCP Gateway is not affected when running in the default stdio mode, which does not listen on network ports. Version 0.28.0 fixes this issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-64443

Credits & Attribution

No credits recorded in the NVD database.

References

More from docker

View All →
CVE-2025-62725
Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
High 8.9
CVE-2025-0495
Secrets leakage to telemetry endpoint via cache backend configuration via buildx
Medium 4.1
CVE-2022-38730
Docker Desktop for Windows before 4.6 allows attackers to overwrite...
Unknown 0
CVE-2022-37326
Docker Desktop for Windows before 4.6.0 allows attackers to delete...
Unknown 0
CVE-2022-34292
Docker Desktop for Windows before 4.6.0 allows attackers to overwrite...
Unknown 0

Affected Vendor

Affected Software

mcp-gateway
Vulnerable Versions:
< 0.28.0

Timeline

Official Publish: December 3rd, 2025
Last Modified: December 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-749

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1565.002 Stored Data Manipulation
Impact