Vulnerability Details CVE-2026-18489
IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 17.5%
CVSS Severity
CVSS v3 Score 7.4
Products affected by CVE-2026-18489
-
cpe:2.3:a:ibm:contextforge:0.1.0
-
cpe:2.3:a:ibm:contextforge:0.1.1
-
cpe:2.3:a:ibm:contextforge:0.2.0
-
cpe:2.3:a:ibm:contextforge:0.3.0
-
cpe:2.3:a:ibm:contextforge:0.3.1
-
cpe:2.3:a:ibm:contextforge:0.4.0
-
cpe:2.3:a:ibm:contextforge:0.5.0
-
cpe:2.3:a:ibm:contextforge:0.6.0
-
cpe:2.3:a:ibm:contextforge:0.7.0
-
cpe:2.3:a:ibm:contextforge:0.8.0
-
cpe:2.3:a:ibm:contextforge:0.9.0
-
cpe:2.3:a:ibm:contextforge:1.0.0
-
cpe:2.3:a:ibm:contextforge:1.0.1
-
cpe:2.3:a:ibm:contextforge:1.0.2
-
cpe:2.3:a:ibm:contextforge:1.0.3
-
cpe:2.3:a:ibm:contextforge:1.0.4
-
cpe:2.3:a:ibm:contextforge:1.0.5
-
cpe:2.3:a:ibm:contextforge:1.0.6
-
cpe:2.3:a:ibm:contextforge:1.0.7
-
cpe:2.3:a:ibm:contextforge:1.0.8