{"affected":[{"product":"ContextForge MCP Gateway","source":"CNA: ibm","vendor":"IBM","versions":[{"lessThanOrEqual":"1.0.11","status":"affected","version":"1.0.0","versionType":"semver"}]}],"cveId":"CVE-2026-110195","cwes":["CWE-287"],"description":"IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow an authenticated caller to bypass upstream credential-level authorization policies due to an insufficiently specific cache key in the RFC 8693 token exchange cache, enabling reuse of cached upstream bearer tokens across different credentials belonging to the same user.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.4,"severity":"medium","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},{"score":5.4,"severity":"medium","source":"NVD: psirt@us.ibm.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.1"}],"modifiedAt":1794608240733,"publishedAt":1794606198359,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7296695"},{"source":"psirt@us.ibm.com","tags":[],"url":"https://www.ibm.com/support/pages/node/7296695"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"IBM strongly recommends addressing the vulnerability now.\n\nProduct(s)Version(s) number and/or range Remediation/Fix/InstructionsIBM ContextForge MCP Gatewayv1.1.0Install or upgrade to v1.1.0 [ v1.1.0 Release Notes https://github.com/IBM/mcp-context-forge/releases/tag/v1.1.0 ]"},{"kind":"workaround","source":"CNA: ibm","text":"IBM strongly recommends upgrading to the fixed version.\n\nIf this cannot be done, ensure authorization policies for upstream MCP servers assign identical scopes and permissions to all credential types (interactive session JWTs and API tokens) for a given account, or avoid configuring OAuth token exchange with `subject_token_source=inbound_user_jwt` across mixed credential types until the gateway is updated."},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7296695"}],"revision":"32ef2932b591559009d639b604816ddb8530ed30cea723ff23219cfa8a6897bc","sources":[{"modifiedAt":1794606198359,"name":"CNA: ibm","retrievedAt":1794607723035,"url":"https://www.cve.org/CVERecord?id=CVE-2026-110195"},{"modifiedAt":1794608240733,"name":"NVD","retrievedAt":1794615614166,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110195"}],"ssvc":null,"status":"published","title":"IBM ContextForge MCP Gateway is affected by an authorization bypass vulnerability","updatedAt":1794615614166}