CVE-2026-110195: IBM ContextForge MCP Gateway is affected by an authorization bypass vulnerability

Q: Who can exploit this issue?

An attacker must be an authenticated caller and must have credentials associated with the same user as another credential whose cached upstream bearer token can be reused. The issue affects upstream credential-level authorization policies.

Q: Which versions are affected?

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 are affected.

Q: What is the underlying condition that enables the bypass?

The RFC 8693 token exchange cache uses a cache key that is not sufficiently specific. This can allow cached upstream bearer tokens to be reused across different credentials belonging to the same user.

Published Nov 13, 2026

Updated

IBM ContextForge could allow an authenticated caller to bypass upstream credential-level authorization policies due to an insufficiently specific cache key in the RFC 8693 token exchange cache, enabling reuse of cached upstream bearer tokens across different credentials belonging to the same user.

Other sources

IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow an authenticated caller to bypass upstream credential-level authorization policies due to an insufficiently specific cache key in the RFC 8693 token exchange cache, enabling reuse of cached upstream bearer tokens across different credentials belonging to the same user.

— MITRE

Affected Software

1 affected component

IBM ContextForge MCP Gateway<=v1.0.0 - v1.0.11

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.1.0

Event History

Nov 13, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

CVE Published

via MITRE·09:43 PM

Data Sourced

via MITRE·09:43 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7296695

Frequently Asked Questions

Who can exploit this issue?

An attacker must be an authenticated caller and must have credentials associated with the same user as another credential whose cached upstream bearer token can be reused. The issue affects upstream credential-level authorization policies.

Which versions are affected?

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 are affected.

What is the underlying condition that enables the bypass?

The RFC 8693 token exchange cache uses a cache key that is not sufficiently specific. This can allow cached upstream bearer tokens to be reused across different credentials belonging to the same user.

CVE-2026-110195: IBM ContextForge MCP Gateway is affected by an authorization bypass vulnerability

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Who can exploit this issue?

Which versions are affected?

What is the underlying condition that enables the bypass?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which versions are affected?

What is the underlying condition that enables the bypass?