CVE-2026-77822

Summary

IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.

Affected Software

Weaknesses

• CWE-918: CWE-918 Server-Side Request Forgery (SSRF)

Workarounds

Operators who cannot immediately upgrade can reduce exposure by:

1. Disable A2A — set the environment variable MCPGATEWAY_A2A_ENABLED=False to disable the A2A subsystem entirely. This removes the vulnerable endpoint from the attack surface at the cost of A2A functionality.

2. Restrict A2A create/invoke permissions — revoke A2A creation and invocation rights from developer and team_admin roles in environments where A2A is not required.

3. Network-level egress controls — enforce outbound network policy at the host or cloud level to block the gateway process from reaching cloud metadata endpoints and private RFC 1918 address ranges, preventing exploitation of the DNS-rebinding window even if a rebind attempt succeeds.

None of these mitigations eliminate the underlying vulnerability; IBM strongly recommends upgrading to the fixed version.

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.ibm.com/support/pages/node/7286055

• ←Previous
• Next→