Medium · 6.5 CVE-2026-18484 EUVD-2026-119701GHSA-2hgv-xvmf-mw3c

IBM ContextForge MCP Gateway is affected by a denial-of-service via tool name collision through slug normalization

Published Nov 8, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Vendor: IBM Product: ContextForge MCP Gateway

Description

IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper slug normalization causing tool name collisions.

Affected products

Vendor	Product	Affected	Fixed
IBM	ContextForge MCP Gateway	1.0.0 – ≤ 1.0.11	—

References

https://www.ibm.com/support/pages/node/7294233 vendor-advisory patch