CVE-2026-110199

Stored content could run script in a gateway user’s browser

IBM · ContextForge MCP Gateway web interface

First documented disclosure · Review checkpoint

Summary

The gateway web interface rendered privileged users’ stored content as executable script. The viewer’s authenticated session or credentials could be exposed.

Severity and exploitation evidence

Medium · 4.8/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The gateway web interface rendered privileged users’ stored content as executable script.

Conditions required

A privileged user could create the content and another user viewed it.

Potential impact

The viewer’s authenticated session or credentials could be exposed.

Affected versions and configurations

1.0.0 through 1.0.11.

Fix and mitigation status

1.1.0.

Practical next steps

Upgrade the gateway and review the users permitted to publish content to the interface.

Operating lesson

Treat stored administrator input as untrusted when rendering it to other users.

Evidence and limits

The advisory and CVE record were published on 2026-11-13.

Sources