A high-severity DNS rebinding vulnerability in IBM ContextForge MCP Gateway allows authenticated attackers to perform Server-Side Request Forgery and access sensitive information.

The software is susceptible to a Server-Side Request Forgery (CWE-918) condition via DNS rebinding during tool invocation, requiring the attacker to possess authenticated access to the system.

This vulnerability poses a significant risk to data confidentiality, as it enables an authenticated attacker to bypass network controls and potentially access internal resources or sensitive data that should be protected. With a CVSS score of 7.7, the issue is classified as high severity, indicating that successful exploitation could lead to unauthorized information disclosure within the internal environment.

Immediate Action: Update IBM ContextForge MCP Gateway to a version beyond 1.0.6, utilizing the fix provided in the vendor pull request at https://github.com/IBM/mcp-context-forge/pull/5925.

Proactive Monitoring: Review application and system access logs for anomalous outbound network requests or unexpected DNS resolution patterns originating from the gateway service.

Compensating Controls: Implement strict egress filtering on the host running the gateway to restrict connections to unauthorized or internal network segments, effectively limiting the scope of any potential SSRF attempt.

Public Exploit Available: No (exploit_available: false)

Given the potential for unauthorized data access and the high CVSS score, organizations should prioritize patching this component. Administrators must ensure that the update is applied immediately to prevent authenticated users from exploiting the DNS rebinding flaw to exfiltrate internal data.