Skip to content
IBM ContextForge MCP Gateway Vulnerabilities Disclosed

IBM ContextForge MCP Gateway Vulnerabilities Disclosed

First seen 14 Nov 2026, 17:12 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 14, 2026 at 17:12 UTC
  • •Two high-severity vulnerabilities identified in IBM ContextForge MCP Gateway.
  • •CVE-2026-110279 allows credential override, potentially bypassing user permissions.
  • •CVE-2026-110278 may expose sensitive user identity data to third-party servers.

IBM disclosed two vulnerabilities in the ContextForge MCP Gateway, CVE-2026-110279 and CVE-2026-110278, both rated high severity. CVE-2026-110279 allows improper credential handling through the X-Upstream-Authorization header, potentially enabling authenticated users to bypass permission controls. CVE-2026-110278 could allow attackers to replay identity claims, exposing sensitive user information to third-party servers. Both vulnerabilities affect versions 1.0.0 to 1.1.0 of the gateway. No active exploitation has been confirmed, but organizations are urged to upgrade to version 1.1.1 immediately. The vulnerabilities were published on November 13, 2026, and are not listed in the Known Exploited Vulnerabilities (KEV) catalog. IBM recommends immediate remediation to mitigate risks associated with unauthorized access and data exposure.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 7h ago How this analysis works

Timeline

2026-11-13
CVE-2026-110279 and CVE-2026-110278 published
IBM disclosed two vulnerabilities in the ContextForge MCP Gateway, affecting versions 1.0.0 to 1.1.0.
www.ibm.com
2026-11-14
IBM recommends immediate upgrade
IBM advises users to upgrade to version 1.1.1 to mitigate risks from the vulnerabilities.
Redpacketsecurity

More articles in this cluster (4)

Following this threat?

Track CVE-2026-110278 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

Which versions are affected?
IBM ContextForge MCP Gateway versions 1.0.0 through 1.1.0 are affected.
Is there active exploitation of these vulnerabilities?
No active exploitation has been confirmed for either CVE-2026-110279 or CVE-2026-110278.
What should organizations do to protect themselves?
Organizations should upgrade to version 1.1.1 of the ContextForge MCP Gateway immediately.