CVE-2025-64443 — Vulnerability in github.com/docker/mcp-gateway —...

HIGH

Docker MCP Plugin and Docker MCP Gateway have DNS Rebinding vulnerability when running in sse or streaming mode

Published December 3, 2025Updated December 9, 2025Source: osv

Summary

### Impact When ran in sse or streaming mode (--transport), the Docker MCP Gateway is vulnerable to a DNS rebinding attack. Vulnerability allows for Browser-Based exploitation of any MCP servers that are executing within the Docker MCP Gateway. Any tools or other features exposed by MCP servers can be manipulated by an attacker who is able to get a victim to visit a malicious website, or if a victim is served a malicious advertisement. The MCP Gateway is not prone to this attack when started in its default stdio mode, which does not listen on any network ports. ### Patches Patch available in version v0.28.0 ### Workarounds Do not start the MCP gateway in sse or streaming mode (use default stdio)

Advisory Timeline

First published December 3, 2025 (313 days ago).
Last revised December 9, 2025 — 6 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

Update github.com/docker/mcp-gateway to 0.28.0 or later

go get github.com/docker/mcp-gateway@v0.28.0

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (1)

Affects 1 ecosystem: go (1).

Package	Ecosystem	Affected	Fixed In
github.com/docker/mcp-gateway	go	All versions	0.28.0

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-749
View on MITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.2 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

—

Confidentiality

—

Integrity

—

Availability

—

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:H/VA:N/SC:H/SI:H/SA:H

References

Frequently Asked Questions

What is CVE-2025-64443?: Docker MCP Plugin and Docker MCP Gateway have DNS Rebinding vulnerability when running in sse or streaming mode This vulnerability has been assigned a severity rating of HIGH (CVSS score: 9.2/10).
How do I check if my project is affected by CVE-2025-64443?: CVE-2025-64443 affects github.com/docker/mcp-gateway. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2025-64443 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

9.2

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-46gc-mwh4-cc5r

GO-2025-4179

Related CVEs

CVE-2024-41110
CRITICAL
Authz zero length regression
CVE-2019-14271
CRITICAL
Moby Docker cp broken with debian containers
CVE-2026-107809
HIGH
Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs
CVE-2025-62725
HIGH
Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
CVE-2026-107813
HIGH
Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up

More Go Modules advisories

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies