# CVE-2026-18484: IBM ContextForge MCP Gateway denial of service in tool slug normalization

Source: https://junglewise.ai/threats/cve-2026-18484-ibm-contextforge-mcp-gateway-1-0-0-through-1-0-11-could-allow-a  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-08. Updated: 2026-11-08  
License: CC BY 4.0 with a link back

CVE-2026-18484 · Severity: medium · CVSS 6.5 · Published 2026-11-08

IBM ContextForge MCP Gateway is a Model Context Protocol federated gateway that allows teams to manage and invoke tools. An authenticated attacker with gateway-create permission can register a gateway whose computed tool name collides with an existing tool, causing that tool to become unavailable to all team members until an administrator intervenes.

Technologies: [IBM ContextForge MCP Gateway](https://junglewise.ai/threats/technologies/contextforge-mcp-gateway). Vendors: [IBM](https://junglewise.ai/threats/vendors/ibm).

## Quick answers

**Is CVE-2026-18484 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-18484 being exploited in the wild.

**How severe is CVE-2026-18484?** Medium severity, with a CVSS score of 6.5, published 8 November 2026.

**Which products and versions are affected?** IBM ContextForge MCP Gateway 1.0.0 through 1.0.11.

**Is there a fix for CVE-2026-18484?** Yes: fixed in v1.1.0. Until then: An administrator can mitigate an active collision by renaming or removing one of the two conflicting gateway registrations, which restores invocability of the affected tool. IBM strongly recommends upgrading to v1.1.0, as there is no configuration setting that prevents the collision from being created in versions prior to v1.1.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-18484 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-18484?** Check whether you run IBM ContextForge MCP Gateway at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in v1.1.0

An administrator can mitigate an active collision by renaming or removing one of the two conflicting gateway registrations, which restores invocability of the affected tool. IBM strongly recommends upgrading to v1.1.0, as there is no configuration setting that prevents the collision from being created in versions prior to v1.1.0.

## Technical details

An authenticated user with gateway-create permission can exploit improper slug normalization in the federated gateway logic to create a tool name collision with an existing public tool in the same team. When a collision occurs, MCP tools/call requests for the affected tool fail with an ambiguity error (CWE-706: Use of Incorrectly-Resolved Name or Reference). The attacker requires network access and valid authentication credentials to trigger the denial of service.

## Affected products

- IBM ContextForge MCP Gateway 1.0.0 through 1.0.11

## Timeline

- 2026-10-27: disclosed

## References

- [https://www.ibm.com/support/pages/node/7294233](https://www.ibm.com/support/pages/node/7294233)

## Related threats

- [IBM ContextForge MCP Gateway server-side request forgery in OAuth registration](https://junglewise.ai/threats/cve-2026-8355-ibm-contextforge-mcp-gateway-0-1-0-through-1-0-5-is-vulnerable-to)
- [IBM ContextForge MCP Gateway path traversal in Admin API](https://junglewise.ai/threats/cve-2026-77825-ibm-contextforge-mcp-gateway-1-0-0-through-1-0-8-was-vulnerable)
- [IBM ContextForge MCP Gateway protection bypass in nested payload inspection](https://junglewise.ai/threats/cve-2026-11918-ibm-contextforge-mcp-gateway-protection-bypass-in-nested-payload)
- [IBM ContextForge MCP Gateway default credentials auth bypass](https://junglewise.ai/threats/cve-2026-78573-ibm-contextforge-mcp-gateway-default-credentials-auth-bypass)
- [IBM ContextForge MCP Gateway jq filter injection credential disclosure](https://junglewise.ai/threats/cve-2026-18486-ibm-contextforge-mcp-gateway-jq-filter-injection-credential)