{"id":"CVE-2026-110189","aliases":[],"cve":{"records":[{"id":"CVE-2026-110189","source":"ibm","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-13T17:24:47.069Z","published":"2026-11-13T21:43:26.623Z","modified":"2026-11-13T21:43:26.623Z"}],"publishers":[{"name":"ibm","role":"CNA","organizationId":"9a959283-ebb5-44b6-b705-dcc2bbced522","modified":"2026-11-13T21:43:26.623Z"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7296697","tags":["vendor-advisory","patch"],"source":"ibm"}],"weaknesses":[{"id":"CWE-184","description":"CWE-184 Incomplete List of Disallowed Inputs","source":"ibm"}],"applicability":[],"prioritization":[]},"title":"IBM ContextForge MCP Gateway is affected by a denial of service due to an incomplete list of disallowed jq inputs","titleSource":"ibm","descriptionSource":"ibm","description":"IBM ContextForge MCP Gateway 1.0.8 through 1.0.11, and v1.1.0  is vulnerable to denial of service due to an incomplete denylist in the jq filter guard module (CWE-184). An authenticated remote attacker can supply a crafted `jsonpath_filter` value containing `halt`, `halt_error`, or unbounded-loop built-ins that bypass the safety check, causing gateway worker process termination or sustained resource exhaustion.","score":6.5,"severity":"medium","published":"2026-11-13T21:43:26.623Z","modified":"2026-11-13T21:43:26.623Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"IBM","name":"ContextForge MCP Gateway","platforms":[],"versions":[{"version":"1.0.8","status":"affected","lessThanOrEqual":"1.0.11","versionType":"semver"},{"version":"1.1.0","status":"affected","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:contextforge_mcp_gateway:1.0.8:*:*:*:*:*:*:*","cpe:2.3:a:ibm:contextforge_mcp_gateway:1.0.11:*:*:*:*:*:*:*"],"source":"ibm","url":"https://www.cve.org/CVERecord?id=CVE-2026-110189"}],"remediation":[{"text":"IBM strongly recommends addressing the vulnerability now.\n\nProduct(s)Version(s) number and/or range Remediation/Fix/InstructionsIBM ContextForge MCP Gatewayv1.1.1Install or upgrade to v1.1.1 [ v1.1.1 Release notes https://github.com/IBM/mcp-context-forge/releases/tag/v1.1.1 ]","source":"ibm","url":"https://www.cve.org/CVERecord?id=CVE-2026-110189"},{"text":"None. IBM strongly recommends upgrading to the fixed version.","source":"ibm","url":"https://www.cve.org/CVERecord?id=CVE-2026-110189"}],"references":["https://www.ibm.com/support/pages/node/7296697"],"sources":[{"name":"CVE","id":"CVE-2026-110189","modified":"2026-11-13T21:43:26.623Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-110189"}],"assessments":[{"source":"ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","score":6.5}],"sourceAffected":[],"observedAt":"2026-11-13T22:14:42.836Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:45:32.518Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-11-13T22:35:32.734Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-13T22:35:35.887Z","attemptedAt":"2026-11-13T22:35:35.887Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-13T22:35:35.900Z","attemptedAt":"2026-11-13T22:35:35.900Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-13T22:35:35.902Z","attemptedAt":"2026-11-13T22:35:35.902Z"}],"evidence":[],"aiSummary":{"text":"IBM ContextForge MCP Gateway versions 1.0.8 through 1.0.11 and 1.1.0 are vulnerable to denial of service due to an incomplete denylist, allowing an authenticated remote attacker to cause gateway worker process termination or resource exhaustion. The weakness is caused by an incomplete list of disallowed jq inputs. An attacker can supply a crafted jsonpath_filter value to bypass safety checks.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-13T22:21:04.872Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-110189"}]}}