EUVD-2026-78898
GHSA-x4xw-xv9j-3c3q
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Network-reachable, low complexity, but requires an authenticated gateway account (PR:L); only low C/I impact with no availability loss.
Primary rating from Vendor (ibm).
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content.
AnalysisAI
Authenticated users of IBM ContextForge MCP Gateway through v1.0.4 can bypass the gateway's payload protection mechanisms because its recursive content inspection does not fully traverse deeply nested or embedded payload structures. Successful abuse yields limited but real integrity and confidentiality impact (CVSS 5.4, AV:N/AC:L/PR:L/UI:N) by allowing disallowed content or instructions to pass through the filter that is meant to stop them, undermining the gateway's role as a security boundary between MCP clients and downstream tool servers. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid authenticated account on the IBM ContextForge MCP Gateway (PR:L per the published CVSS vector) and the ability to submit payloads that the gateway forwards to a downstream MCP server - i.e., the gateway's payload inspection or content-filtering path must be in use, which is its default function. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N, 5.4) describes a network-reachable, low-complexity attack that nonetheless requires a valid authenticated account and produces only low confidentiality and integrity impact with no availability effect - a moderate, not catastrophic, profile. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade IBM ContextForge MCP Gateway beyond v1.0.4 to the fixed release described in the IBM advisory at https://www.ibm.com/support/pages/node/7285720 - patch availability is vendor-confirmed but the exact fixed version string is not specified in the supplied data, so verify it on the support page before scheduling. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Contextforge Mcp Gateway
View allAdministrative account takeover in IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.7 lets a remote attacker log
We need answer JSON only. Need follow all fields. Need synthesize. We need think deeply. Need comply with weird gdynia i
Credential theft and privilege escalation in IBM ContextForge MCP Gateway v1.0.7 and earlier allow a remote low-privileg
Same weakness CWE-184 – Incomplete List of Disallowed Inputs
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today