Threats tagged 'ghsa-cvpg-9259-jm3r'

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 contain a vulnerability where an authenticated user can bypass upstream credential-level authorization policies. This occurs due to an insufficiently specific cache key in the RFC 8693 token exchange cache, allowing reuse of cached upstream bearer tokens across different credentials of the same user. The vulnerability has a medium severity rating with a CVSS score of 5.4.