CVE-2026-8355 | IBM ContextForge MCP Gateway up to 1.0.5 OAuth Configuration oauth_config.token_url server-side request forgery

October 20, 2026 Yanac

A vulnerability, which was classified as problematic, was found in IBM ContextForge MCP Gateway up to 1.0.5. This affects an unknown part of the component OAuth Configuration. Executing a manipulation of the argument oauth_config.token_url can lead to server-side request forgery.

This vulnerability appears as CVE-2026-8355. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More