Contextforge Mcp Gateway
Monthly
Administrative account takeover in IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.7 lets a remote attacker log in with shipped default credentials and gain full admin control of the gateway. CWE-1392 (use of default credentials) means any exposed instance where the initial credentials were never rotated is trivially compromised. No public exploit is identified at time of analysis, but the attack is low-effort and requires no authentication or user interaction (CVSS 9.8).
Credential theft and privilege escalation in IBM ContextForge MCP Gateway v1.0.7 and earlier allow a remote low-privilege authenticated attacker to extract sensitive credentials and elevate to higher access tiers by submitting maliciously crafted jq filter expressions that the gateway fails to properly validate. The jq filter injection bypasses input controls within the Model Context Protocol (MCP) gateway layer, giving authenticated-but-low-privilege users a direct path to confidentiality and integrity compromise of the entire gateway service. No public exploit code has been identified at time of analysis, and IBM has released a patch via advisory 7286052.
Server-side request forgery via DNS rebinding in IBM ContextForge MCP Gateway allows a remote low-privileged attacker to pivot through the gateway into otherwise network-isolated internal resources, yielding high confidentiality impact and potential integrity impact against back-end services. The CVSS scope-change flag (S:C) reflects that a successful exploit extends the attack beyond the gateway itself to internal infrastructure it services. No public exploit code has been identified at time of analysis; a vendor patch is available via IBM's support advisory.
Administrative account takeover in IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.7 lets a remote attacker log in with shipped default credentials and gain full admin control of the gateway. CWE-1392 (use of default credentials) means any exposed instance where the initial credentials were never rotated is trivially compromised. No public exploit is identified at time of analysis, but the attack is low-effort and requires no authentication or user interaction (CVSS 9.8).
Credential theft and privilege escalation in IBM ContextForge MCP Gateway v1.0.7 and earlier allow a remote low-privilege authenticated attacker to extract sensitive credentials and elevate to higher access tiers by submitting maliciously crafted jq filter expressions that the gateway fails to properly validate. The jq filter injection bypasses input controls within the Model Context Protocol (MCP) gateway layer, giving authenticated-but-low-privilege users a direct path to confidentiality and integrity compromise of the entire gateway service. No public exploit code has been identified at time of analysis, and IBM has released a patch via advisory 7286052.
Server-side request forgery via DNS rebinding in IBM ContextForge MCP Gateway allows a remote low-privileged attacker to pivot through the gateway into otherwise network-isolated internal resources, yielding high confidentiality impact and potential integrity impact against back-end services. The CVSS scope-change flag (S:C) reflects that a successful exploit extends the attack beyond the gateway itself to internal infrastructure it services. No public exploit code has been identified at time of analysis; a vendor patch is available via IBM's support advisory.