CVE-2026-94407: Medium severity vulnerability

Published Nov 13, 2026

Updated

IBM ContextForge is potentially vulnerable to denial of service due to uncontrolled regular expression complexity (CWE-400 / ReDoS). An authenticated user with tool-registration privileges can embed catastrophically backtracking regex patterns in a tool's JSON Schema pattern field; when ContextForge validates arguments against that schema, the validation call may consume unbounded CPU, potentially degrading gateway availability.

Other sources

IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is potentially vulnerable to denial of service due to uncontrolled regular expression complexity (CWE-400 / ReDoS). An authenticated user with tool-registration privileges can embed catastrophically backtracking regex patterns in a tool's JSON Schema pattern field; when ContextForge validates arguments against that schema, the validation call may consume unbounded CPU, potentially degrading gateway availability.

— MITRE

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM ContextForge MCP Gateway to a version that resolves this vulnerability.
Fixed in 1.1.0

Event History

Nov 13, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

CVE Published

via MITRE·09:43 PM

Data Sourced

via MITRE·09:43 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7296667

Frequently Asked Questions

Who can exploit this issue?

An authenticated user must have tool-registration privileges. The attacker also needs to be able to supply a tool JSON Schema containing a catastrophically backtracking regular expression in its pattern field.

Which deployments are affected?

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 are identified as potentially vulnerable. The issue is relevant where registered tool schemas are used to validate arguments.

What is the operational impact of successful exploitation?

Schema validation may consume unbounded CPU while processing the malicious pattern. This can degrade MCP Gateway availability and cause denial of service.

CVE-2026-94407: Medium severity vulnerability

Other sources

Remediation

Event History

Parent advisories

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What is the operational impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What is the operational impact of successful exploitation?