CVE-2026-18489

IBM ContextForge Translate is affected by cross-client credential context confusion PUBLISHED

Description (CNA)

IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.

Affected (CNA)

Vendor / product	Versions
IBM / ContextForge MCP Gateway - Translate utility	affected <= 1.0.8

CWE

CWE-488

References

https://www.ibm.com/support/pages/node/7286056

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.