CVE-2026-18484 IBM ContextForge MCP Gateway is affected by a denial-of-service via tool name collision through slug normalization
IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 are vulnerable to a denial-of-service (DoS) attack due to improper slug normalization, where a remote authenticated attacker can cause a tool name collision, leading to a denial-of-service condition. This vulnerability is relevant to developers and operators of AI agents using IBM ContextForge MCP Gateway, as it may be used in conjunction with other AI tools, and a successful attack could disrupt the functionality of these agents, potentially causing operational disruptions or data loss.
Save an API key to vote.