CVE-2026-110279: IBM ContextForge MCP Gateway is affected by an improper authentication vulnerability

Published Nov 12, 2026

Updated

IBM ContextForge is vulnerable to improper credential handling because the X-Upstream-Authorization request header can override the gateway-managed upstream credential for OAuth (authorizationcode and clientcredentials), bearer and basic authenticated gateways, which could allow an authenticated user to cause upstream requests to be made with a different credential and bypass per-user permission and audit attribution.

Other sources

IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 is vulnerable to improper credential handling because the X-Upstream-Authorization request header can override the gateway-managed upstream credential for OAuth (authorizationcode and clientcredentials), bearer and basic authenticated gateways, which could allow an authenticated user to cause upstream requests to be made with a different credential and bypass per-user permission and audit attribution.

— MITRE

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM ContextForge MCP Gateway to a version that resolves this vulnerability.
Fixed in 1.1.1

Event History

Nov 12, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 13, 2026

CVE Published

via MITRE·09:43 PM

Data Sourced

via MITRE·09:43 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

IBM ContextForge MCP Gateway versions 1.0.0 through 1.1.0 are affected when configured with OAuth using authorization_code or client_credentials, bearer authentication, or basic authentication for upstream gateways.

What does an attacker need to exploit this issue?

The attacker needs to be an authenticated user able to send requests through the gateway and supply an X-Upstream-Authorization request header. No user interaction is required.

What is the practical impact of exploitation?

An authenticated user may cause upstream requests to use a different credential than the gateway-managed credential. This can bypass per-user permission controls and undermine audit attribution for upstream activity.

CVE-2026-110279: IBM ContextForge MCP Gateway is affected by an improper authentication vulnerability

Other sources

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to exploit this issue?

What is the practical impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to exploit this issue?

What is the practical impact of exploitation?