A high severity vulnerability in IBM ContextForge MCP Gateway allows authenticated attackers to perform unauthorized credential extraction and privilege escalation.

The flaw exists due to improper validation of jq filters within the MCP Context Forge component. This allows a remote attacker with authenticated access to manipulate filter logic to gain unauthorized information and elevate privileges.

The potential for unauthorized credential access and privilege escalation poses a significant risk to organizational security. Successful exploitation could lead to full system compromise, exposure of sensitive data, and the potential for lateral movement within the network. Given the CVSS score of 8.8, this vulnerability represents a severe threat to the confidentiality, integrity, and availability of the affected system.

Immediate Action: Upgrade IBM ContextForge MCP Gateway to version 1.0.8 immediately. Additionally, rotate critical secrets including JWT_SECRET_KEY, AUTH_ENCRYPTION_SECRET, DATABASE_URL, REDIS_URL, and BASIC_AUTH_PASSWORD.

Proactive Monitoring: Monitor system access logs for anomalous patterns related to authenticated user sessions or unusual query requests targeting the MCP Gateway interface.

Compensating Controls: Ensure that access to the gateway is restricted to authorized personnel only and implement strict egress filtering to prevent unauthorized data exfiltration in the event of a breach.

Public Exploit Available: No

Given the high CVSS score and the nature of the impact, organizations should prioritize patching this vulnerability immediately. Upgrading to version 1.0.8 is the only definitive fix for the underlying flaw. Furthermore, the mandatory rotation of all listed secrets is critical, as any credentials utilized prior to the patch must be considered compromised.