high8.8
CVE-2026-18486
IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges du…
Impact
IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Contextforge | through 1.0.7 |