What is the CVSS score of CVE-2025-64443?

CVE-2025-64443 has a CVSS 3.1 base score of 9.6 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Docker are affected by CVE-2025-64443?

MCP Gateway versions 0.27.0 and earlier are vulnerable to DNS rebinding attacks when running in sse or streaming modes, allowing attackers to manipulate exposed tools and services from compromised…. A patch is available.

How to fix or mitigate CVE-2025-64443?

Within 24 hours: Identify all MCP Gateway deployments and document which are running in sse or streaming transport modes versus default stdio mode. Within 7 days: Upgrade all affected MCP Gateway instances to version 0.28.0 or later; prioritize production and customer-facing deployments. Within 30 days: Verify all upgrades are complete, test functionality in staging environments before production deployment, and document the transport mode configuration for each gateway instance.

Docker CVE-2025-64443

EUVD-2025-200985 CRITICAL

Exposed Dangerous Method or Function (CWE-749)

2025-12-03 security-advisories@github.com

GHSA-46gc-mwh4-cc5r

Information Disclosure Docker Mcp Gateway Suse

9.6

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.6 CRITICAL

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

SUSE

7.3 HIGH

qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 16:14 euvd

EUVD-2025-200985

Analysis Generated

Mar 15, 2026 - 16:14 vuln.today

Patch released

Mar 15, 2026 - 16:14 nvd

Patch available

CVE Published

Dec 03, 2025 - 18:15 nvd

CRITICAL 9.6

DescriptionGitHub Advisory

MCP Gateway allows easy and secure running and deployment of MCP servers. In versions 0.27.0 and earlier, when MCP Gateway runs in sse or streaming transport mode, it is vulnerable to DNS rebinding. An attacker who can get a victim to visit a malicious website or be served a malicious advertisement can perform browser-based exploitation of MCP servers executing behind the gateway, including manipulating tools or other features exposed by those MCP servers. MCP Gateway is not affected when running in the default stdio mode, which does not listen on network ports. Version 0.28.0 fixes this issue.

AnalysisAI

A security vulnerability in MCP Gateway (CVSS 9.6). Critical severity with potential for significant impact on affected systems. Vendor patch is available.