Threats tagged 'ghsa-774m-v6g3-r639'

IBM ContextForge MCP Gateway versions 1.0.0 through 1.1.0 contain a vulnerability that allows attackers to replay identity propagation claim signatures or expose sensitive user identity information to third-party MCP servers. This occurs due to the use of static signature payloads and the absence of per-gateway configuration checks during tool invocation. The vulnerability has a high severity rating with a CVSS score of 7.4.