CVE-2026-110189

A registered filter could stop an MCP gateway worker

IBM · ContextForge MCP Gateway jq filters

First documented disclosure · Review checkpoint

Summary

The filter guard accepted operations capable of ending a worker or consuming its processing time. A worker could terminate or spend sustained CPU time on the filter.

Severity and exploitation evidence

Medium · 6.5/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The filter guard accepted operations capable of ending a worker or consuming its processing time.

Conditions required

An authenticated remote caller could supply a filter.

Potential impact

A worker could terminate or spend sustained CPU time on the filter.

Affected versions and configurations

1.0.8 through 1.0.11 and 1.1.0.

Fix and mitigation status

1.1.1.

Practical next steps

Upgrade ContextForge MCP Gateway to 1.1.1 or later.

Operating lesson

Bound the execution time and resources of user-provided filters.

Evidence and limits

The advisory and CVE record were published on 2026-11-13.

Sources