Threats tagged 'ghsa-fp2v-98c9-h9m3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.1	CVE-2026-110279IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 is vulnerable to improper credential handling because the High8.12026-11-14GCVE DatabaseCVE-2026-110279 IBM ContextForge MCP Gateway versions 1.0.0 through 1.1.0 have a vulnerability in improper credential handling. The X-Upstream-Authorization request header can override the gateway-managed upstream credentials for OAuth, bearer, and basic authenticated gateways. This flaw allows an authenticated user to make upstream requests with different credentials, bypassing per-user permission checks and audit attribution. Report on CVE-2026-110279 Vulnerability CWE-287 #ghsa-fp2v-98c9-h9m3	GCVE Database	2026-11-14

Page 1 of 1