CVE-2026-77825
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (GET /v1/admin/logs/file). The path confinement check uses str.startswith() rather than proper boundary validation, allowing an authenticated admin to read .log, .jsonl, and .json files outside the configured LOG_FOLDER.
Risk Assessment
An authenticated admin can read files outside the log directory if their absolute path shares a string prefix with the log directory. This may lead to disclosure of sensitive data from the filesystem.
Recommendation
Upgrade IBM ContextForge MCP Gateway to a version later than 1.0.8 when available. Restrict administrative account privileges and review access to the log-download endpoint.
Other vulnerabilities in IBM ContextForge MCP Gateway
See all- CVE-2026-78573Critical
IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.7 allow a remote attacker to gain administrative access due to the use of default credentials.
- CVE-2026-8355Medium
A Server-Side Request Forgery (SSRF) vulnerability in IBM ContextForge MCP Gateway versions 0.1.0 through 1.0.5. An authenticated user with gateway creation privileges can perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints by supplying a malicious oauth_config.token_url parameter during OAuth-enabled gateway registration.
- CVE-2026-11918Medium
IBM ContextForge MCP Gateway <= v1.0.4 allows an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content. The flaw enables evasion of security controls through content hidden in nested structures.
- CVE-2026-18489High
IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.
- CVE-2026-18486High
IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters.
- CVE-2026-77822High
IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.
Original NVD description (English source)
IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`). The path confinement check uses `str.startswith()` rather than proper boundary validation, allowing an authenticated admin to read `.log`, `.jsonl`, and `.json` files outside the configured `LOG_FOLDER` by supplying a filename that resolves into a sibling directory whose absolute path shares the log directory's string prefix.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS