CVE-2026-8355

IBM ContextForge gateway registration can reach internal services

IBM · IBM ContextForge MCP Gateway

First documented disclosure · Review checkpoint

Summary

Gateway registration can send requests to an unauthorized internal service.

Severity and exploitation evidence

Medium · 6.4/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed public sources describe the vulnerability and its conditions. Malicious exploitation has not been established in the reviewed sources.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Validation for the registered gateway did not cover the associated OAuth destinations.

Conditions required

A signed-in account needs permission to create gateways.

Potential impact

A gateway can make unauthorized requests to services reachable from its network, including metadata services.

Affected versions and configurations

0.1.0 through 1.0.5.

Fix and mitigation status

1.0.6.

Practical next steps

Update to 1.0.6 or restrict gateway registration to trusted administrators pending the upgrade.

Operating lesson

Apply outbound checks to each destination in an integration, including its identity configuration.

Evidence and limits

IBM assigns CVSS 3.1 score 6.4 in its August bulletin. CISA enrichment in the October CVE record gives 5.4.

Sources