EUVD-2026-71256
GHSA-2pmv-2qcc-jcgq
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Authenticated (PR:L); DNS-rebinding timing/DNS control raises complexity to AC:H; SSRF reaching internal systems justifies S:C and C:H, but description supports info disclosure only, so I:N/A:N.
Primary rating from Vendor (ibm).
CVSS VectorNVD
Lifecycle Timeline
6DescriptionNVD
IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.
AnalysisAI
Server-side request forgery in IBM ContextForge MCP Gateway (versions ≤ v1.0.8) lets an authenticated remote attacker induce the gateway to issue outbound requests to attacker-chosen destinations, exposing sensitive information from systems reachable from the gateway's network position; the vendor rates it 9.6, while our independent assessment scores it 8.0 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) because exploitation requires both a valid authenticated session and attacker-controlled DNS with a winning re-resolution timing window. No public exploit code has been identified at time of analysis and there is no KEV listing; EPSS is 0.21% (11th percentile), indicating low predicted exploitation activity. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a valid authenticated session to the ContextForge MCP Gateway (PR:L) plus attacker control over DNS resolution for a hostname the gateway will fetch, so exploitation depends on the gateway accepting a user-supplied/attacker-influenced URL or host and performing outbound requests to it. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine but not urgent finding whose 9.6 CVSS overstates real-world priority. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor fix referenced by IBM at https://www.ibm.com/support/pages/node/7286055; per the affected-version data, upgrading beyond ContextForge MCP Gateway v1.0.8 remediates the DNS-rebinding SSRF. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm which instances are running IBM ContextForge MCP Gateway at v1.0.8 or earlier, notify the owning teams that a vendor patch is available via IBM's advisory, and apply it to any internet-facing or broadly accessible gateway instances first; simultaneously restrict inbound access to the gateway to known trusted networks and review its audit logs for outbound requests to unfamiliar or internal-only addresses. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Contextforge Mcp Gateway
View allAdministrative account takeover in IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.7 lets a remote attacker log
Credential theft and privilege escalation in IBM ContextForge MCP Gateway v1.0.7 and earlier allow a remote low-privileg
Authenticated users of IBM ContextForge MCP Gateway through v1.0.4 can bypass the gateway's payload protection mechanism
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today