Vulnerability · Published Sep 24, 2026 · Assigned by ibm

CVE-2026-77825IBM ContextForge MCP Gateway is affected by path traversal

Medium 4.9

In plain English

A medium-severity path traversal in ContextForge MCP Gateway from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).

Severity (CVSS 3.1)4.9Medium

Exploit odds (30 days)0.3%top 75.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`). The path confinement check uses `str.startswith()` rather than proper boundary validation, allowing an authenticated admin to read `.log`, `.jsonl`, and `.json` files outside the configured `LOG_FOLDER` by supplying a filename that resolves into a sibling directory whose absolute path shares the log directory's string prefix.

Affected products (as reported)

Vendor	Product	Versions
IBM	ContextForge MCP Gateway	1.0.0 – through 1.0.8

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

References

https://www.ibm.com/support/pages/node/7289314 vendor-advisory, patch