CVE-2026-18489
IBM ContextForge Translate is affected by cross-client credential context confusion
IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.
CVSS 3.1 · 7.4 High
EPSS < 1%
KEV · Not listed
Vendors
Products