CVE-2026-18489

The IBM ContextForge MCP Gateway's Translate utility versions 1.0.8 and earlier are vulnerable to a session management flaw that allows remote attackers to access sensitive information from other user sessions. This exposure could lead to unauthorized data disclosure, making it critical for organizations using this utility to prioritize patching or mitigating this vulnerability to protect sensitive information. Users of the affected product should take immediate action to secure their systems against potential exploitation.