CVE-2026-110194: IBM ContextForge MCP Gateway is affected by a server-side request forgery vulnerability

Q: Which deployments are affected?

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 are affected.

Q: What access does an attacker need to exploit this issue?

The attacker must be authenticated. No user interaction is required, and the vulnerable service can be reached over the network.

Q: What could exploitation enable?

An authenticated attacker may cause the gateway system to send unauthorized requests. This could enable network enumeration or help facilitate further attacks.

Published Nov 13, 2026

Updated

IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Other sources

IBM MCP Context Forge is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

— IBM

Affected Software

1 affected component

IBM ContextForge MCP Gateway<=v1.0.0 - v1.0.11

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM ContextForge MCP Gateway to a version that resolves this vulnerability.
Fixed in 1.1.0

Event History

Nov 13, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

CVE Published

via MITRE·09:44 PM

Data Sourced

via MITRE·09:44 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7296696

Frequently Asked Questions

Which deployments are affected?

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 are affected.

What access does an attacker need to exploit this issue?

The attacker must be authenticated. No user interaction is required, and the vulnerable service can be reached over the network.

What could exploitation enable?

An authenticated attacker may cause the gateway system to send unauthorized requests. This could enable network enumeration or help facilitate further attacks.

CVE-2026-110194: IBM ContextForge MCP Gateway is affected by a server-side request forgery vulnerability

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need to exploit this issue?

What could exploitation enable?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need to exploit this issue?

What could exploitation enable?