CVE-2026-110194

IBM ContextForge MCP Gateway server-side request forgery in URL fetching

medium · 5.4

IBM ContextForge MCP Gateway

Published Nov 13, 2026, 21:44 UTC

Description

IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.