Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-110194 EUVD-2026-125810GHSA-vwg6-jvc2-rpch

IBM ContextForge MCP Gateway is affected by a server-side request forgery vulnerability

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by ibm

Vendor: IBM Product: ContextForge MCP Gateway

Description

IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Affected products

VendorProductAffectedFixed
IBM ContextForge MCP Gateway 1.0.0 – ≤ 1.0.11 —

References