Skip to content
OpenAdvisories
High · 8.8 CVE-2026-18486 EUVD-2026-71605GHSA-2hj7-884r-x6jr

IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution

Published Sep 4, 2026 · Updated Sep 10, 2026 · Assigned by ibm

Vendor: IBM Product: ContextForge MCP Gateway

Description

IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters.

Affected products

VendorProductAffectedFixed
IBM ContextForge MCP Gateway <= v1.0.7 —

References