Description
IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.
Published: 2026-09-04
Score: 7.4 High
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure
Action: Discontinue Use
AI Analysis

Impact

The vulnerability arises from cross‑client credential context confusion in the IBM ContextForge MCP Gateway Translate utility. Because the service was designed only for local, single‑session development, it does not isolate session data for multiple concurrent clients. An attacker can exploit this lack of isolation to read sensitive information that belongs to other sessions. The resulting impact is information disclosure from one client to another.

Affected Systems

The IBM ContextForge MCP Gateway – Translate utility is affected, with all releases up to and including version 1.0.8. The vulnerability exists in these releases; it should be mitigated by ensuring the service is not deployed in a production or multi‑client environment.

Risk and Exploitability

The CVSS score of 7.4 classifies the vulnerability as high severity, and it can be exploited remotely against an exposed Translate service. The EPSS score is unavailable, and the issue is not listed in CISA KEV, but if the Translate service resides on an unprotected network a remote attacker could send crafted requests to obtain data from other sessions. The likelihood of exploitation depends on whether an organization has deployed the service outside its intended local development context.

Generated by OpenCVE AI on September 4, 2026 at 18:33 UTC.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now. The IBM ContextForge Translate service is intended **only for local, single-session development use**. It does not provide the session isolation required for production or multi-client deployments. Users must ensure the Translate service is not exposed in any production capacity. PR [#6388]( https://github.com/IBM/mcp-context-forge/pull/6388) https://github.com/IBM/mcp-context-forge/pull/6388%29 (merged 2026-08-24) updates the product documentation to make this restriction explicit, removing previous guidance that could have implied multi-tenant production suitability.

Vendor Workaround

Do not use the IBM ContextForge Translate service in any production or multi-client environment. The service is designed exclusively for local development scenarios where only a single client session is expected. This applies regardless of whether `--enable-dynamic-env` is active. If the Translate service is currently running in a non-development environment: 1. Stop the Translate service and remove it from any production deployment immediately. 2. Rotate any credentials (API tokens, `Authorization` headers) that may have been mapped into the shared subprocess environment while multiple clients were connected. 3. Review audit logs for tool calls where the HTTP caller identity may not match the subprocess credential context.

OpenCVE Recommended Actions

  • Apply any available IBM patch or update for the Translate service. If a patch is not yet released, upgrade to the latest version or follow IBM guidance to eliminate the credential context confusion.
  • Ensure the Translate service is not deployed in a production or multi‑client environment; stop and remove it from production deployments immediately.
  • Rotate any API tokens or credentials that may have been shared across client sessions while the Translate service was running.
  • Review audit logs for tool calls where the HTTP caller identity may not match the subprocess credential context.

Generated by OpenCVE AI on September 4, 2026 at 18:33 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 15 Sep 2026 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Ibm contextforge
CPEs cpe:2.3:a:ibm:contextforge:*:*:*:*:*:python:*:*
Vendors & Products Ibm contextforge

Fri, 04 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 04 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.
Title IBM ContextForge Translate is affected by cross-client credential context confusion
First Time appeared Ibm
Ibm contextforge Mcp Gateway Translate Utility
Weaknesses CWE-488
CPEs cpe:2.3:a:ibm:contextforge_mcp_gateway_translate_utility:*:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm contextforge Mcp Gateway Translate Utility
References
Metrics cvssV3_1

{'score': 7.4, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Ibm Contextforge Contextforge Mcp Gateway Translate Utility
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-09-04T17:29:57.267Z

Reserved: 2026-07-31T13:49:30.524Z

Link: CVE-2026-18489

cve-icon Vulnrichment

Updated: 2026-09-04T17:29:53.682Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-04T17:16:56.550

Modified: 2026-09-15T15:04:09.813

Link: CVE-2026-18489

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-04T23:00:15Z

Weaknesses
  • CWE-488

    Exposure of Data Element to Wrong Session