CVE-2026-18489 IBM ContextForge Translate is affected by cross-client credential context confusion
Remote attackers can access sensitive data from other sessions due to credential context confusion in the IBM ContextForge Translate utility.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-18489?
CVE-2026-18489 is a high-severity vulnerability in IBM ContextForge MCP Gateway - Translate utility, published on 4 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session.
Weakness: CWE-488
Which versions are affected by CVE-2026-18489?
It affects 1 product.
Products include Ibm Contextforge.
How do I fix CVE-2026-18489?
No fix has been published for CVE-2026-18489 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-18489 being exploited?
There is no known exploitation of CVE-2026-18489 in the wild and no public exploit code.
Other vulnerabilities in IBM ContextForge MCP Gateway - Translate utility
- CVE-2026-78573 IBM ContextForge MCP Gateway is affected by use of default credentials
- CVE-2026-18486 IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution
- CVE-2026-77822 Server-side request forgery in ContextForge MCP Gateway
- CVE-2026-18905 IBM ContextForge MCP Gateway is affected by server-side request forgery via DNS TOCTOU at tool invocation
- CVE-2026-77825 IBM ContextForge MCP Gateway is affected by path traversal
Sources
Also known as GHSA-x9rc-p36x-296j.