CVE-2026-110189: IBM ContextForge MCP Gateway is affected by a denial of service due to an incomplete list of disallowed jq inputs

The CVSS vector indicates that an attacker needs low privileges and can exploit the issue over the network. No user interaction is required.

The reported impact is denial of service, affecting availability. The CVSS vector indicates no stated confidentiality or integrity impact.

Published Nov 13, 2026

Updated

Affected Software

1 affected component

IBM ContextForge MCP Gateway<=v1.0.8 - v1.0.11, v1.1.0

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in v1.1.1

Nov 13, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

CVE Published

via MITRE·09:43 PM

Data Sourced

via MITRE·09:43 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

The CVSS vector indicates that an attacker needs low privileges and can exploit the issue over the network. No user interaction is required.

The reported impact is denial of service, affecting availability. The CVSS vector indicates no stated confidentiality or integrity impact.