contextforge_mcp_gateway vulnerabilities
CVEs whose affected-version data names the contextforge_mcp_gateway package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-8355Medium· 5.4IBM ContextForge MCP Gateway is affected by server-side request forgery
IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources…
▾ SunlitIBM · ContextForge MCP GatewayEPSS 0.23%via CVEORG
CVE-2026-11918Medium· 5.4IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content.
IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content.
▾ SunlitIBM · ContextForge MCP GatewayEPSS 0.27%via NVD