All vulnerabilities
CVE-2026-77825

IBM ContextForge MCP Gateway is affected by path traversal

IBM ContextForge MCP GatewayNetwork & edge
Open in ThreatlineRecord JSON
CVSS
4.9Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.32%Chance of exploitation activity in the next 30 days, higher than 23% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published24 Sep 2026Updated 26 Sep 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (GET /v1/admin/logs/file). The path confinement check uses str.startswith() rather than proper boundary validation, allowing an authenticated admin to read .log, .jsonl, and .json files outside the configured LOG_FOLDER by supplying a filename that resolves into a sibling directory whose absolute path shares the log directory's string prefix.

Text from CVE List

Affected versions 1

  • ContextForge MCP Gatewayaffected: 1.0.0 through 1.0.8CVE List

References 1