Contextforge vulnerabilities

4 known vulnerabilities in Contextforge from IBM. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  ContextForge MCP Gateway - Translate utility: Exposure of Data Element to Wrong Session

  CVE-2026-18489Sep 4, 2026IBM

  IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.

• 8.8 High severity

  ContextForge MCP Gateway: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-18486Sep 4, 2026IBM

  IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters.

• 9.6 Critical severity

  ContextForge MCP Gateway: Server-Side Request Forgery

  CVE-2026-77822Sep 4, 2026IBM

  IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.

• 7.7 High severity

  ContextForge MCP Gateway (`mcp-contextforge-gat…: Server-Side Request Forgery

  CVE-2026-18905Sep 4, 2026IBM

  IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive information due to a DNS rebinding vulnerability during tool invocation.