CVE-2026-18486

IBM ContextForge MCP Gateway versions up to 1.0.7 are vulnerable to a security flaw that enables remote authenticated attackers to exploit improper validation of jq filters, potentially leading to the exposure of sensitive credentials and privilege escalation. Organizations using this gateway should prioritize patching to mitigate the risk of unauthorized access and data breaches. Immediate action is recommended for those managing sensitive environments or relying on this software for critical operations.