{"id":8969,"date":"2026-11-14T15:23:00","date_gmt":"2026-11-14T15:23:00","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass"},"modified":"2026-11-14T15:23:00","modified_gmt":"2026-11-14T15:23:00","slug":"cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass","title":{"rendered":"CVE-2026-110195: IBM ContextForge MCP Gateway authorization bypass lets authenticated users reuse cached tokens"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">IBM disclosed CVE-2026-110195 on November 13, 2026, affecting IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11. The vulnerability stems from an insufficiently specific cache key in the gateway&#8217;s RFC 8693 token exchange implementation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What:<\/strong> CVE-2026-110195, an authorization bypass in IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 due to an insufficiently specific cache key in the RFC 8693 token exchange cache<\/li><li><strong>Impact:<\/strong> Authenticated users can reuse cached upstream bearer tokens obtained by higher-privileged credentials (such as interactive session tokens) when using lower-privileged credentials (such as API tokens)<\/li><li><strong>Who is affected:<\/strong> Organizations running IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 with OAuth token exchange configured using <code>subject_token_source=inbound_user_jwt<\/code><\/li><li><strong>Fix:<\/strong> Upgrade to IBM ContextForge MCP Gateway v1.1.0<\/li><li><strong>Severity:<\/strong> Medium (CVSS 5.4)<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">In plain English<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">IBM ContextForge MCP Gateway is a tool that helps connect AI systems to data sources using the Model Context Protocol. A security flaw was found in how it handles authentication tokens. When the gateway exchanges tokens with upstream servers, it caches those tokens to improve performance, but the cache did not properly separate tokens for different types of credentials belonging to the same user account. This means someone logged in with a restricted API key could accidentally reuse a more powerful token that was cached from an earlier interactive login session. If you use this gateway software, you should upgrade to version 1.1.0, otherwise you can ignore this issue.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When configured to use a caller&#8217;s inbound JSON Web Token (JWT) to obtain an exchanged access token from an OAuth authorization server for an upstream Model Context Protocol (MCP) server, the gateway caches upstream tokens by gateway, user account, and target audience. However, the cache does not bind entries to the specific inbound JWT credential that obtained them.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This design flaw allows an authenticated user with a restricted credential (such as an API token with limited upstream permissions) to reuse an upstream bearer token that was previously obtained and cached by a higher-privileged credential belonging to the same user account (such as an interactive session token). The result is an authorization bypass that violates upstream credential-level authorization policies.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">IBM assigned the vulnerability a CVSS v3.1 base score of 5.4 (CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:L\/I:L\/A:N), categorizing it as medium severity. The vulnerability is classified under CWE-287: Improper Authentication.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The issue was reported to IBM by Nick Simpson.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">IBM strongly recommends upgrading to IBM ContextForge MCP Gateway v1.1.0, which addresses the vulnerability. Release notes for v1.1.0 are available through IBM&#8217;s support portal.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If immediate upgrade is not possible, IBM advises ensuring that authorization policies for upstream MCP servers assign identical scopes and permissions to all credential types (interactive session JWTs and API tokens) for a given account. Alternatively, organizations should avoid configuring OAuth token exchange with <code>subject_token_source=inbound_user_jwt<\/code> across mixed credential types until the gateway is updated.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This vulnerability highlights the complexity of implementing secure token caching in multi-credential environments. While the CVSS score of 5.4 places it in the medium severity range, the practical impact depends heavily on how organizations have configured their upstream authorization policies and credential types.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The flaw requires an attacker to already be authenticated, which limits the attack surface. However, in environments where users have multiple credential types with different permission levels (a common security practice), the vulnerability could allow privilege escalation within the same user account.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The issue is specific to deployments using OAuth token exchange with inbound user JWTs and does not affect all ContextForge MCP Gateway configurations. Organizations not using this specific feature are not impacted.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-110195\" target=\"_blank\" rel=\"noreferrer noopener\">NVD: CVE-2026-110195<\/a><\/li><li><a href=\"https:\/\/www.ibm.com\/support\/pages\/node\/7296695\" target=\"_blank\" rel=\"noreferrer noopener\">IBM Security Bulletin: IBM ContextForge MCP Gateway authorization bypass vulnerability<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 contain an authorization bypass vulnerability that allows authenticated users to reuse cached upstream bearer tokens across different credentials, potentially accessing resources beyond their intended permissions.<\/p>\n","protected":false},"author":2,"featured_media":8968,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"medium","_nx_sec_affected":"IBM ContextForge MCP Gateway 1.0.0\u20131.0.11","_nx_sec_status":"patch-available","_nx_sec_kicker":"ALERT: Token cache flaw lets authenticated users bypass authorization in IBM MCP gateway","_nx_sec_type":"mcp","_nx_sec_vendor":"IBM","_nx_sec_fixed":"v1.1.0","_nx_sec_action":""},"categories":[65,11,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-8969","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-security","category-infrastructure","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CVE-2026-110195: IBM ContextForge MCP Gateway bypass<\/title>\n<meta name=\"description\" content=\"CVE-2026-110195 in IBM ContextForge MCP Gateway 1.0.0\u20131.0.11 lets authenticated users bypass authorization by reusing cached upstream tokens. Patch in 1.1.0.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-110195: IBM ContextForge MCP Gateway bypass\" \/>\n<meta property=\"og:description\" content=\"CVE-2026-110195 in IBM ContextForge MCP Gateway 1.0.0\u20131.0.11 lets authenticated users bypass authorization by reusing cached upstream tokens. Patch in 1.1.0.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-14T15:23:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"CVE-2026-110195: IBM ContextForge MCP Gateway authorization bypass lets authenticated users reuse cached tokens\",\"datePublished\":\"2026-11-14T15:23:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass\"},\"wordCount\":621,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass-title.webp\",\"articleSection\":[\"AI Security\",\"Infrastructure\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-14T15:23:00+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass\",\"name\":\"CVE-2026-110195: IBM ContextForge MCP Gateway bypass\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass-title.webp\",\"datePublished\":\"2026-11-14T15:23:00+00:00\",\"description\":\"CVE-2026-110195 in IBM ContextForge MCP Gateway 1.0.0\u20131.0.11 lets authenticated users bypass authorization by reusing cached upstream tokens. Patch in 1.1.0.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Image: AI-generated, i10X\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2026-110195: IBM ContextForge MCP Gateway authorization bypass lets authenticated users reuse cached tokens\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"},\"subjectOf\":[{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/papers.ssrn.com\\\/abstract=7426699\",\"name\":\"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/www.heise.de\\\/news\\\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html\",\"name\":\"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/t3n.de\\\/news\\\/bewerbung-schreiben-ki-5-fehler-1747190\\\/\",\"name\":\"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2026-110195: IBM ContextForge MCP Gateway bypass","description":"CVE-2026-110195 in IBM ContextForge MCP Gateway 1.0.0\u20131.0.11 lets authenticated users bypass authorization by reusing cached upstream tokens. Patch in 1.1.0.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass","og_locale":"en_US","og_type":"article","og_title":"CVE-2026-110195: IBM ContextForge MCP Gateway bypass","og_description":"CVE-2026-110195 in IBM ContextForge MCP Gateway 1.0.0\u20131.0.11 lets authenticated users bypass authorization by reusing cached upstream tokens. Patch in 1.1.0.","og_url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass","og_site_name":"i10X News","article_published_time":"2026-11-14T15:23:00+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_image":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"CVE-2026-110195: IBM ContextForge MCP Gateway authorization bypass lets authenticated users reuse cached tokens","datePublished":"2026-11-14T15:23:00+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass"},"wordCount":621,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass-title.webp","articleSection":["AI Security","Infrastructure","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-14T15:23:00+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass","url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass","name":"CVE-2026-110195: IBM ContextForge MCP Gateway bypass","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass-title.webp","datePublished":"2026-11-14T15:23:00+00:00","description":"CVE-2026-110195 in IBM ContextForge MCP Gateway 1.0.0\u20131.0.11 lets authenticated users bypass authorization by reusing cached upstream tokens. Patch in 1.1.0.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass-title.webp","width":1344,"height":768,"caption":"Image: AI-generated, i10X"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-110195-ibm-contextforge-mcp-gateway-authorization-bypass#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"CVE-2026-110195: IBM ContextForge MCP Gateway authorization bypass lets authenticated users reuse cached tokens"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"},"subjectOf":[{"@type":"CreativeWork","url":"https:\/\/papers.ssrn.com\/abstract=7426699","name":"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens"},{"@type":"CreativeWork","url":"https:\/\/www.heise.de\/news\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html","name":"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT"},{"@type":"CreativeWork","url":"https:\/\/t3n.de\/news\/bewerbung-schreiben-ki-5-fehler-1747190\/","name":"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden"}]}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8969","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=8969"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8969\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/8968"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=8969"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=8969"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=8969"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=8969"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=8969"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}