medium5.4
CVE-2026-11918
IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive insp…
Impact
IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content.
Affected products
| Product | Affected versions |
|---|---|
| IBM ContextForge MCP Gateway | through 1.0.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.