Patch Vulnerability

Description

Patches an existing AttackForge vulnerability (also called a finding or issue) inside a project. Only the fields supplied in args are changed; omitted fields are left untouched.

A two-step workflow is required:

1. Call get_args_schema_for_tool(tool="patch_vulnerability") to retrieve the current JSON Schema for args.

2. Build args to match that schema and call this tool.

The schema requires at minimum a vulnerability id (source: find_vulnerabilities) and a project id (source: find_projects, or the project_ids on the vulnerability returned by find_vulnerabilities). Preconditions: the caller needs Edit access to the target project. Any rich-text field must use the AttackForge richtext format from the richtext_format block. On success the patched vulnerability id is returned.

How To Enable

1. Go to Users

2. Select the user you would like to provide access to this tool

3. Click on Access > MCP

4. Click on Add Tools

5. Select the tool patch_vulnerability and click Add

Example Prompts

• Change the priority of vulnerability X to Critical.

• Mark vulnerability X as closed.

• Update the steps to reproduce on this finding.

• Set the CVE custom field on vulnerability X to CVE-2025-26943.

Parameters

Parameter	Type	Required	Description
args	object	Yes	The vulnerability-patch payload. Build it to satisfy get_args_schema_for_tool(tool="patch_vulnerability"). Requires at minimum a vulnerability id and a project id; other keys apply a partial update.

Example Response

{
  "id": "656168055d7035a12ade4cb3"
}