{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18489", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-07-31T13:49:30.524Z", "datePublished": "2026-09-04T16:23:08.905Z", "dateUpdated": "2026-09-04T17:29:57.267Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-04T16:23:08.905Z"}, "title": "IBM ContextForge Translate is affected by cross-client credential context confusion", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-488", "description": "CWE-488 Exposure of Data Element to Wrong Session", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "ContextForge MCP Gateway - Translate utility", "versions": [{"status": "affected", "version": "<= 1.0.8"}], "cpes": ["cpe:2.3:a:ibm:contextforge_mcp_gateway_translate_utility:*:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM ContextForge MCP Gateway - Translate utility &lt;= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7286056", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "HIGH", "baseScore": 7.4, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}}], "workarounds": [{"lang": "en", "value": "Do not use the IBM ContextForge Translate service in any production or multi-client environment. The service is designed exclusively for local development scenarios where only a single client session is expected. This applies regardless of whether `--enable-dynamic-env` is active.\n\n\nIf the Translate service is currently running in a non-development environment:\n\n1. Stop the Translate service and remove it from any production deployment immediately.\n\n2. Rotate any credentials (API tokens, `Authorization` headers) that may have been mapped into the shared subprocess environment while multiple clients were connected.\n\n3. Review audit logs for tool calls where the HTTP caller identity may not match the subprocess credential context.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><div>Do not use the IBM ContextForge Translate service in any production or multi-client environment. The service is designed exclusively for local development scenarios where only a single client session is expected. This applies regardless of whether `--enable-dynamic-env` is active.</div><br/><div>If the Translate service is currently running in a non-development environment:</div><div>1. Stop the Translate service and remove it from any production deployment immediately.</div><div>2. Rotate any credentials (API tokens, `Authorization` headers) that may have been mapped into the shared subprocess environment while multiple clients were connected.</div><div>3. Review audit logs for tool calls where the HTTP caller identity may not match the subprocess credential context.</div></div>"}]}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\n\nThe IBM ContextForge Translate service is intended **only for local, single-session development use**. It does not provide the session isolation required for production or multi-client deployments. Users must ensure the Translate service is not exposed in any production capacity.\n\n\nPR [#6388]( https://github.com/IBM/mcp-context-forge/pull/6388) https://github.com/IBM/mcp-context-forge/pull/6388%29 (merged 2026-08-24) updates the product documentation to make this restriction explicit, removing previous guidance that could have implied multi-tenant production suitability.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><div>IBM strongly recommends addressing the vulnerability now.</div><br/><div>The IBM ContextForge Translate service is intended **only for local, single-session development use**. It does not provide the session isolation required for production or multi-client deployments. Users must ensure the Translate service is not exposed in any production capacity.</div><br/><div>PR [#6388](<a href=\"https://github.com/IBM/mcp-context-forge/pull/6388%29\" rel=\"nofollow\">https://github.com/IBM/mcp-context-forge/pull/6388)</a> (merged 2026-08-24) updates the product documentation to make this restriction explicit, removing previous guidance that could have implied multi-tenant production suitability.</div></div>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-04T17:29:48.993058Z", "id": "CVE-2026-18489", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-04T17:29:57.267Z"}}]}}

{}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:contextforge_mcp_gateway_translate_utility:*:*:*:*:*:*:*:*"], "product": "ContextForge MCP Gateway - Translate utility", "vendor": "IBM", "versions": [{"status": "affected", "version": "<= 1.0.8"}]}], "source": "psirt@us.ibm.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session."}], "id": "CVE-2026-18489", "lastModified": "2026-09-04T17:16:56.550", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.2, "source": "psirt@us.ibm.com", "type": "Primary"}]}, "published": "2026-09-04T17:16:56.550", "references": [{"source": "psirt@us.ibm.com", "url": "https://www.ibm.com/support/pages/node/7286056"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-488"}], "source": "psirt@us.ibm.com", "type": "Primary"}]}

{}

{}