CVE-2026-77825

Katalog CVE

CVSS 4.9 · Medium EPSS 0,32%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada ibm contextforge. Skor CVSS 3.1 4.9 (Medium) menurut us.ibm.com.

Deskripsi (NVD)

IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`). The path confinement check uses `str.startswith()` rather than proper boundary validation, allowing an authenticated admin to read `.log`, `.jsonl`, and `.json` files outside the configured `LOG_FOLDER` by supplying a filename that resolves into a sibling directory whose absolute path shares the log directory's string prefix.

Rincian

Terbit di NVD

24 September 2026

Terakhir diubah

29 September 2026

Status NVD

Analyzed

CVSS 3.1

4.9 (Medium), sumber us.ibm.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 22,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.ibm.com/support/pages/node/7289314 patch · advisory vendor