CVE-2026-110178

Awaiting Analysis Awaiting Analysis - Queue

Improper Access Control in IBM ContextForge MCP Gateway

Publication date: 2026-11-13

Last updated on: 2026-11-13

Assigner: IBM Corporation

Description

IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to improper access control in the bulk import path. A remote authenticated attacker holding a team-scoped `admin.import` permission can overwrite the endpoint URL, request headers, and authentication credentials of public tools, resources, and prompts owned by other tenants by sending a crafted POST request to `/v1/import` with `conflict_strategy=update`, redirecting subsequent AI gateway invocations to an attacker-controlled host.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-11-13

Last Modified

2026-11-13

Generated

2026-11-14

AI Q&A

2026-11-14

EPSS Evaluated

N/A

NVD

CVE-2026-110178

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	ContextForge MCP Gateway	From 1.0.0 (inc) to 1.0.11 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 has an improper access control flaw in the bulk import feature. A remote authenticated attacker with team-scoped admin.import permission can modify the endpoint URL, headers, and credentials of public tools, resources, and prompts owned by other tenants by sending a crafted POST request to /v1/import with conflict_strategy=update. This redirects AI gateway calls to an attacker-controlled host.

Impact Analysis

An attacker could intercept or manipulate AI gateway traffic, leading to data exfiltration, unauthorized access to sensitive information, or service disruption. Organizations using IBM ContextForge MCP Gateway may face compromised integrations, data integrity issues, or unauthorized modifications to AI workflows.

Compliance Impact

This vulnerability could lead to unauthorized data access or disclosure, violating GDPR's data protection principles and HIPAA's security requirements. Organizations may face compliance violations, legal penalties, or reputational damage due to potential data breaches or loss of data integrity.

Mitigation Strategies

Apply the latest IBM ContextForge MCP Gateway update to version 1.0.12 or later to address the improper access control issue. Restrict team-scoped admin.import permissions to only necessary users and monitor POST requests to /v1/import with conflict_strategy=update for suspicious activity.

Hi! I’m here to help you understand CVE-2026-110178. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...