Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-18486

IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM ContextForge MCP Gateway

  • <= v1.0.7affected

References