EUVD-2026-125805

IBM ContextForge MCP Gateway 1.0.8 through 1.0.11, and v1.1.0 is vulnerable to denial of service due to an incomplete denylist in the jq filter guard module CWE-184. An authenticated remote attacker can supply a crafted jsonpathfilter value containing halt, halterror, or unbounded-loop built-ins...