CVE-2026-110278: IBM ContextForge MCP Gateway is affected by an information exposure vulnerability
IBM ContextForge could allow an attacker to replay identity propagation claims signatures or expose sensitive user identity information to third-party MCP servers due to static signature payloads and missing per-gateway configuration checks during tool invocation.
Other sources
IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 could allow an attacker to replay identity propagation claims signatures or expose sensitive user identity information to third-party MCP servers due to static signature payloads and missing per-gateway configuration checks during tool invocation.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM ContextForge MCP Gatewayto a version that resolves this vulnerability.Fixed in 1.1.1
Event History
Frequently Asked Questions
Which versions should be considered affected?
IBM ContextForge MCP Gateway versions 1.0.0 through 1.1.0 are identified as affected.
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates network-based exploitation with no privileges or user interaction required. Exploitation has high attack complexity and may enable replay of identity-propagation claim signatures or exposure of sensitive user identity information to third-party MCP servers.