CVE Intelligence

Ibm ContextForge MCP Gateway (`mcp-contextforge-gateway`) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ibm ContextForge MCP Gateway (`mcp-contextforge-gateway`): 1 record(s), with affected versions and fixes.

CVE-2026-18905 High · 7.7 CWE-918 Sep 4, 2026
IBM ContextForge MCP Gateway is affected by server-side request forgery via DNS TOCTOU at tool invocation
IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive information due to a DNS rebinding vulnerability during tool invocation.