Improper Access Control in IBM ContextForge MCP Gateway

CVE-2026-110178

What is CVE-2026-110178?

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 are susceptible to an improper access control vulnerability within the bulk import functionality. This weakness allows a remote authenticated attacker, granted the admin.import permission, to manipulate the endpoint URL, request headers, and authentication tokens of tools and resources associated with other users. By sending a specially crafted POST request to the /v1/import endpoint with the conflict_strategy=update parameter, the attacker can redirect future AI gateway calls to a host under their control, posing significant risks to the confidentiality and integrity of the affected environments.

References