Contextforge

contextforge

Vendor: Ibm • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-77825 1Ibm 1Contextforge Sep 29, 2026 Sep 24, 2026 N/A· v4 4.9 MEDIUM· v3 N/A· v2 IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`). The path confinement check uses `str.startswith()` rather than proper...Show more IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`). The path confinement check uses `str.startswith()` rather than proper boundary validation, allowing an authenticated admin to read `.log`, `.jsonl`, and `.json` files outside the configured `LOG_FOLDER` by supplying a filename that resolves into a sibling directory whose absolute path shares the log directory's string prefix.Show less
CVE-2026-78573 1Ibm 1Contextforge Sep 16, 2026 Sep 10, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials.
CVE-2026-18489 1Ibm 1Contextforge Sep 15, 2026 Sep 4, 2026 N/A· v4 7.4 HIGH· v3 N/A· v2 IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.
CVE-2026-18486 1Ibm 1Contextforge Sep 15, 2026 Sep 4, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters.
CVE-2026-77822 1Ibm 1Contextforge Sep 15, 2026 Sep 4, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.
CVE-2026-18905 1Ibm 1Contextforge Sep 15, 2026 Sep 4, 2026 N/A· v4 7.7 HIGH· v3 N/A· v2 IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive information due to a DNS rebinding vulnerability during tool invocatio...Show more IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive information due to a DNS rebinding vulnerability during tool invocation.Show less