An authenticated administrator can craft a request to the log‑download endpoint that causes the server to resolve a filename to a path outside the intended LOG_FOLDER. The vulnerability stems from a simple string prefix check rather than proper path normalization, allowing the administrator to read proprietary log files and configuration artifacts by specifying a name that resolves to a sibling directory. The consequence is the disclosure of potentially confidential operational data, though it does not grant code execution or data tampering.

The issue affects IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.8 inclusive. Versions released after 1.0.9 incorporate the fix and are recommended. No additional vendors or product families are listed in the CNA data.

The CVSS score of 4.9 indicates a moderate impact and the EPSS score is not reported. The vulnerability is not listed in the CISA KEV catalog, suggesting it is not widely exploited yet. Exploitability requires that the attacker gains administrator credentials or otherwise authenticates to the Admin API; once authenticated, the path traversal can be exercised. Because it operates within the log directory, exposure is limited to readable file types (.log, .jsonl, .json). The risk is primarily confidentiality damage rather than denial of service or privilege escalation.