PatchTheCVE: contextforgehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-77825: IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-downloahttps://patchthecve.com/cve/CVE-2026-77825.htmlhttps://patchthecve.com/cve/CVE-2026-77825.htmlTue, 29 Sep 2026 13:26:00 +0000MEDIUM 4.9: IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`). The path confinement check uses `str.startswith()` rather than proper boundary validation, allowing an authenticated admin to read `.log`, `.jsonl`, aCVE-2026-78573: IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access dhttps://patchthecve.com/cve/CVE-2026-78573.htmlhttps://patchthecve.com/cve/CVE-2026-78573.htmlWed, 16 Sep 2026 00:50:11 +0000CRITICAL 9.8: IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials.CVE-2026-18489: IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to ohttps://patchthecve.com/cve/CVE-2026-18489.htmlhttps://patchthecve.com/cve/CVE-2026-18489.htmlTue, 15 Sep 2026 15:04:09 +0000HIGH 7.4: IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.CVE-2026-18486: IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtainhttps://patchthecve.com/cve/CVE-2026-18486.htmlhttps://patchthecve.com/cve/CVE-2026-18486.htmlTue, 15 Sep 2026 15:05:06 +0000HIGH 8.8: IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters.CVE-2026-77822: IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due thttps://patchthecve.com/cve/CVE-2026-77822.htmlhttps://patchthecve.com/cve/CVE-2026-77822.htmlTue, 15 Sep 2026 15:16:27 +0000HIGH 8.2: IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.CVE-2026-18905: IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authttps://patchthecve.com/cve/CVE-2026-18905.htmlhttps://patchthecve.com/cve/CVE-2026-18905.htmlTue, 15 Sep 2026 15:21:14 +0000HIGH 7.7: IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive information due to a DNS rebinding vulnerability during tool invocation.