CVE-2026-18484 IBM ContextForge MCP Gateway is affected by a denial-of-service via tool name collision through slug normalization

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 are vulnerable to a denial-of-service (DoS) attack due to improper slug normalization, where a remote authenticated attacker can cause a tool name collision, leading to a denial-of-service condition. This vulnerability is relevant to developers and operators of AI agents using IBM ContextForge MCP Gateway, as it may be used in conjunction with other AI tools, and a successful attack could disrupt the functionality of these agents, potentially causing operational disruptions or data loss.

RSS Score 0 11/8/2026, 5:54:59 PM Original Source
Save an API key to vote.