{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-18484","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","state":"PUBLISHED","assignerShortName":"ibm","dateReserved":"2026-07-31T13:22:47.530Z","datePublished":"2026-11-08T17:54:59.348Z","dateUpdated":"2026-11-08T17:54:59.348Z"},"containers":{"cna":{"providerMetadata":{"orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm","dateUpdated":"2026-11-08T17:54:59.348Z"},"title":"IBM ContextForge MCP Gateway is affected by a denial-of-service via tool name collision through slug normalization","problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-706","description":"CWE-706 Use of Incorrectly-Resolved Name or Reference","type":"CWE"}]}],"affected":[{"vendor":"IBM","product":"ContextForge MCP Gateway","versions":[{"status":"affected","version":"1.0.0","lessThanOrEqual":"1.0.11","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:contextforge_mcp_gateway:1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:contextforge_mcp_gateway:1.0.11:*:*:*:*:*:*:*"]}],"descriptions":[{"lang":"en","value":"IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper slug normalization causing tool name collisions.","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper slug normalization causing tool name collisions.</p>"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7294233","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseSeverity":"MEDIUM","baseScore":6.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}}],"workarounds":[{"lang":"en","value":"If an immediate upgrade is not possible, an administrator can mitigate an active collision by renaming or removing one of the two conflicting gateway registrations, which restores invocability of the affected tool. There is no configuration setting that prevents the collision from being created prior to the v1.1.0 fix.\n\n\nIBM strongly recommends upgrading to v1.1.0.","supportingMedia":[{"type":"text/html","base64":false,"value":"<div><div>If an immediate upgrade is not possible, an administrator can mitigate an active collision by renaming or removing one of the two conflicting gateway registrations, which restores invocability of the affected tool. There is no configuration setting that prevents the collision from being created prior to the v1.1.0 fix.</div><br/><div>IBM strongly recommends upgrading to v1.1.0.</div></div>"}]}],"solutions":[{"lang":"en","value":"IBM strongly recommends addressing the vulnerability now.\n\nProduct(s)Version(s) number and/or range Remediation/Fix/InstructionsIBM ContextForge MCP Gateway\n\n\n\n1.0.0 - v1.0.11Upgrade to v1.1.0. See [ v1.1.0 release notes https://github.com/IBM/mcp-context-forge/releases/tag/v1.1.0 ]","supportingMedia":[{"type":"text/html","base64":false,"value":"<p><strong>IBM strongly recommends addressing the vulnerability now.</strong></p><div><table><tbody><tr><td><strong>Product(s)</strong></td><td><strong>Version(s) number and/or range </strong></td><td><strong>Remediation/Fix/Instructions</strong></td></tr><tr><td><div><div>IBM ContextForge MCP Gateway</div></div></td><td>1.0.0 - v1.0.11</td><td><div><div>Upgrade to v1.1.0. See [<a href=\"https://github.com/IBM/mcp-context-forge/releases/tag/v1.1.0\" rel=\"nofollow\">v1.1.0 release notes</a>]</div></div></td></tr></tbody></table></div><p></p><p></p>"}]}]}}}