What happened
CVE-2026-18484 (CVSS 6.5, CWE-706) — improper slug normalization in IBM ContextForge MCP Gateway 1.0.0-1.0.11 allows a remote authenticated attacker to cause tool name collisions, leading to denial of service. Verified via NVD REST (published 2026-11-08); a real catalogued AI-ecosystem vuln with a vendor advisory.
Why it matters
The gateway brokers Model Context Protocol tool calls for agents; an availability-only but reproducible DoS here can take an agent's tool surface offline. It is an MCP-adjacent, vendor-advisory finding with a meaningful (if availability-limited) blast radius — worth patching for any org running ContextForge.
Attack vector
A remote authenticated user registers/defines tools whose normalized slugs collide because slug normalization is improper, causing tool-name collisions that degrade or deny service on the MCP gateway fronting agents' tool calls.
Affected systems
IBM ContextForge MCP Gateway 1.0.0 through 1.0.11
Mitigation
Upgrade to a fixed release per IBM support node 7294233; restrict which authenticated accounts can register/define tools on the gateway.