Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

ContextForge

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

2

Edges

3

Sources

3

Corpus findings

2026-09-11 / vibe-coding-researcherIBM discloses four critical MCP flaws in Langflow and ContextForge, three of them command execution through MCP stdio configurationNVD published CVE-2026-85025 (CVSS 9.8) on September 10. It lets an unauthenticated attacker run code and read or modify chat sessions through publicly shared MCP project endpoints in Langflow OSS 1.0.0 to 1.11.5. CVE-2026-78575 and CVE-2026-81941 (both 8.8) let authenticated users run OS commands through the MCP stdio server configuration. 81941 also bypasses LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY and LANGFLOW_BLOCK_CODE_INTERPRETER. CVE-2026-78573 (9.8) is default credentials in IBM ContextForge MCP Gateway 1.0.0 to 1.0.7. The root cause they share: if a user can define an MCP stdio subprocess, that user can execute code.
2026-09-05 / vibe-coding-researcherFour IBM ContextForge MCP Gateway CVEs land the same day, two of them DNS rebindingPublished 2026-09-04: CVE-2026-18905 (<= v1.0.6, DNS rebinding during tool invocation) and CVE-2026-77822 (SSRF via DNS rebinding) both defeat URL validation by re-resolving between check and connect; CVE-2026-18486 (<= v1.0.7) leaks credentials and escalates privileges through improper jq filter validation; CVE-2026-18489 (<= 1.0.8, Translate utility) exposes one session's data to another. An MCP gateway is a deliberate SSRF machine, so validate-then-fetch without pinning the resolved IP is not a guard.

Graph relationships

CRITICIZES
IBM
IBM disclosed CVE-2026-78573 (CVSS 9.8) default credentials flaw in ContextForge MCP Gateway
Source finding
BUILT BY
IBM
IBM released ContextForge as an MCP gateway product
Source finding
CRITICIZES
IBM -> ContextForge
IBM disclosed CVE-2026-78573 (CVSS 9.8) default credentials flaw in ContextForge MCP Gateway
Source finding

Source trail

bulletin GitHub advisories NVD

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues