CVE-2026-8355: ContextForge MCP Gateway 0.1.0 through 1.0.5

Affected technology

ContextForge MCP Gateway · 0.1.0 through 1.0.5
IBM

Description’s affected range: through 1.0.5

Component: Not specified by the source

What an attacker can do

Authenticated users with gateway creation privileges can perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints.

Published 20-Oct-2026 01:49 UTC

CWE: CWE-918
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-8355.html