Skip to content

Known vulnerabilities in IBM ContextForge MCP Gateway

Is your version affected?

CVE Summary Score Published
CVE-2026-8355 IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows… 5.4 Medium Oct 19, 2026
CVE-2026-77825 IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint… 4.9 Medium Sep 24, 2026
CVE-2026-11918 IBM ContextForge MCP… 5.4 Medium Sep 15, 2026
CVE-2026-78573 IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to… 9.8 Critical Sep 10, 2026
CVE-2026-18486 IBM ContextForge MCP… 8.8 High Sep 4, 2026
CVE-2026-77822 IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to… 8.2 High Sep 4, 2026

Other IBM products