CVE-2026-110279

{
  "etk_id": "ETK-2026-4442",
  "cve_id": "CVE-2026-110279",
  "display_id": "CVE-2026-110279",
  "ghsa_id": "GHSA-fp2v-98c9-h9m3",
  "euvd_id": "EUVD-2026-125807",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Credential override in IBM ContextForge MCP Gateway",
  "summary": "IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 does not reliably preserve the credential selected for upstream requests. An authenticated user may cause requests to run under another supplied credential, undermining intended access controls and request attribution; affected deployments accept the relevant client-provided authorization header.",
  "mitigation": "Configure the gateway or a reverse proxy to remove and reject the X-Upstream-Authorization header from client requests. Obtain and deploy an IBM update that is confirmed to address versions 1.0.0 through 1.1.0 when available.",
  "vendor": "IBM",
  "product": "ContextForge MCP Gateway",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 1.0.0, <= 1.1.0"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "ContextForge MCP Gateway",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 8.1,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 16.287989566666667,
  "t0_at": "2026-11-13T21:43:43.544000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-13T21:43:43.544000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-13T21:43:43.544000+00:00",
      "url": "https://github.com/advisories/GHSA-fp2v-98c9-h9m3"
    }
  }
}