Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.6

IBM ContextForge MCP Gateway lets logged-in attacker steal data

CVE-2026-77822 · published 2 months ago
Summary

A user who already has an account can fool the IBM ContextForge MCP Gateway into contacting other internal systems and reveal confidential information. This happens because the gateway does not properly verify where the request is being sent, allowing a DNS trick to redirect traffic. Install IBM's latest security update and limit the gateway's network access to trusted hosts only.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm contextforge mcp gateway <= v1.0.8
ibm contextforge <= 1.0.8
cpe:2.3:a:ibm:contextforge:*:*:*:*:*:python:*:*
Original advisory text
IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.
IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.6 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-918Server-Side Request Forgery (SSRF)
Timeline
Published4 Sep 2026
Updated4 Nov 2026
First seen4 Sep 2026
Sources
CVE-2026-77822 · NVD
CVE-2026-77822 · MITRE
Track software like this
Free during beta