IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 contain an improper access control vulnerability in the bulk import functionality. A remote authenticated attacker with team-scoped admin.import permission can overwrite endpoint URLs, request headers, and authentication credentials of public tools, resources, and prompts owned by other tenants by sending a crafted POST request to the /v1/import endpoint with conflict_strategy=update. This can redirect subsequent AI gateway invocations to an attacker-controlled host.