CVE-2026-18486

IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution PUBLISHED

Description (CNA)

IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters.

Affected (CNA)

Vendor / product	Versions
IBM / ContextForge MCP Gateway	affected <= v1.0.7

CWE

CWE-200

References

https://www.ibm.com/support/pages/node/7286052

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.