CVE-2026-77825
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Summary
IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (GET /v1/admin/logs/file). The path confinement check uses str.startswith() rather than proper boundary validation, allowing an authenticated admin to read .log, .jsonl, and .json files outside the configured LOG_FOLDER by supplying a filename that resolves into a sibling directory whose absolute path shares the log directory's string prefix.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | ContextForge MCP Gateway | 1.0.0 <= 1.0.8 | affected |
Weaknesses
- CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Workarounds
None. IBM strongly recommends upgrading to the fixed version.
As temporary mitigations until the update can be applied:
- Disable the Admin API (
MCPGATEWAY_ADMIN_API_ENABLED=false) if administrative endpoints are not required.
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.