IBM Contextforge vulnerabilities

6 CVEs affecting IBM Contextforge, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-77825, published 2026-09-24.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-78573, published 2026-09-10. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials.
• CVE-2026-77822, published 2026-09-04. Critical severity, CVSS 9.6. EPSS: 0.4% chance of exploitation in the next 30 days. IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.
• CVE-2026-18905, published 2026-09-04. High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days. IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive information due to a DNS rebinding vulnerability…
• CVE-2026-18486, published 2026-09-04. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters.
• CVE-2026-77825, published 2026-09-24. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`). The path confinement check uses…
• CVE-2026-18489, published 2026-09-04. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the…