High · 7.4 CVE-2026-18489 EUVD-2026-71604GHSA-x9rc-p36x-296j

IBM ContextForge Translate is affected by cross-client credential context confusion

Published Sep 4, 2026 · Updated Sep 4, 2026 · Assigned by ibm

Vendor: IBM Product: ContextForge MCP Gateway - Translate utility

Description

IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.

Affected products

Vendor	Product	Affected	Fixed
IBM	ContextForge MCP Gateway - Translate utility	<= 1.0.8	—

References

https://www.ibm.com/support/pages/node/7286056 vendor-advisory patch