CVE-2026-110279

Awaiting Analysis Awaiting Analysis - Queue

Improper Credential Handling in IBM ContextForge MCP Gateway

Publication date: 2026-11-13

Last updated on: 2026-11-13

Assigner: IBM Corporation

Description

IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 is vulnerable to improper credential handling because the X-Upstream-Authorization request header can override the gateway-managed upstream credential for OAuth (authorization_code and client_credentials), bearer and basic authenticated gateways, which could allow an authenticated user to cause upstream requests to be made with a different credential and bypass per-user permission and audit attribution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-11-13

Last Modified

2026-11-13

Generated

2026-11-14

AI Q&A

2026-11-14

EPSS Evaluated

N/A

NVD

CVE-2026-110279

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	ContextForge MCP Gateway	From 1.0.0 (inc) to 1.1.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 has a flaw where the X-Upstream-Authorization header can override gateway-managed upstream credentials for OAuth, bearer, and basic authenticated gateways. This allows an authenticated user to change the credential used for upstream requests, potentially bypassing user-specific permissions and audit tracking.

Impact Analysis

An attacker with access could manipulate upstream requests to use different credentials, bypassing intended permissions and audit logs. This may lead to unauthorized access to sensitive data or actions, compromising system integrity and confidentiality.

Compliance Impact

This vulnerability could violate compliance requirements by allowing unauthorized access or actions, undermining audit trails and user attribution. GDPR and HIPAA require strict access controls and auditability, which this flaw may compromise.

Mitigation Strategies

Disable the X-Upstream-Authorization header handling in IBM ContextForge MCP Gateway to prevent credential override. Review and restrict user permissions to minimize potential impact. Monitor gateway logs for unusual upstream credential changes or unauthorized requests.

Hi! I’m here to help you understand CVE-2026-110279. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...