CVE-2026-11918 — IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structures
IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested p…
Published: 2026-09-15 · CVSS: 5.4 · CVSS 3.1
IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7