A remote code execution vulnerability in IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 allows an authenticated attacker to cause a denial of service due to improper slug normalization, resulting in tool name collisions. This vulnerability is significant for developers building and operating AI agents that interact with the affected software, as it may lead to unintended behavior or system crashes. The issue is caused by a bug in the way the software handles URLs, which can be exploited by an attacker with valid authentication credentials. Developers should update to version 1.0.12 or later to mitigate this vulnerability.