Description
IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 could allow an attacker to replay identity propagation claims signatures or expose sensitive user identity information to third-party MCP servers due to static signature payloads and missing per-gateway configuration checks during tool invocation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | ContextForge MCP Gateway | 1.0.0 – ≤ 1.1.0 | — |
References
- https://www.ibm.com/support/pages/node/7296489 vendor-advisory patch