CVE-2026-110278
HIGH
NVD
CVSS Score
7.4
Severity
HIGH
Published
Nov 13, 2026
Vendor
unknown
Description
IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 could allow an attacker to replay identity propagation claims signatures or expose sensitive user identity information to third-party MCP servers due to static signature payloads and missing per-gateway configuration checks during tool invocation.