CVE-2026-110178

A team administrator could replace another tenant’s public tool settings

IBM · ContextForge MCP Gateway configuration import

First documented disclosure · Review checkpoint

Summary

Bulk import accepted changes to public objects belonging to other tenants. Later AI tool calls could go to a different host using altered endpoints, headers or credentials.

Severity and exploitation evidence

Medium · 4.1/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Bulk import accepted changes to public objects belonging to other tenants.

Conditions required

A signed-in user held team-scoped configuration import permission.

Potential impact

Later AI tool calls could go to a different host using altered endpoints, headers or credentials.

Affected versions and configurations

1.0.0 through 1.0.11.

Fix and mitigation status

1.1.0.

Practical next steps

Upgrade and reserve configuration import for platform administrators until patched.

Operating lesson

Check ownership whenever an import changes an existing object.

Evidence and limits

The public fix discussion described this issue on 2026-10-15. The formal advisory followed on 2026-11-13, and the CVE record on 2026-11-13.

Sources