A remote code execution vulnerability (CVE-2026-18484) was identified in IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11. The issue arises from improper slug normalization, which can cause tool name collisions. This allows a remote authenticated attacker to potentially cause a denial of service. Users of these affected versions should update to a fixed version to mitigate the vulnerability.