CVE-2026-11918

IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structures PUBLISHED

Description (CNA)

IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content.

Affected (CNA)

Vendor / product	Versions
IBM / ContextForge MCP Gateway	affected <= v1.0.4

CWE

CWE-184

References

https://www.ibm.com/support/pages/node/7285720

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.