Ibm: >> Contextforge >> 0.1.1 Security Vulnerabilities
IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.
CVSS Score
7.4
EPSS Score
0.003
Published
2026-09-04
IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.
CVSS Score
8.2
EPSS Score
0.002
Published
2026-09-04
IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive information due to a DNS rebinding vulnerability during tool invocation.
CVSS Score
7.7
EPSS Score
0.003
Published
2026-09-04