Aws Mcp Gateway Registry
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Aws Mcp Gateway Registry.
By the Year
In 2026 there have been 3 vulnerabilities in Aws Mcp Gateway Registry with an average score of 8.5 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 3 | 8.47 |
It may take a day or so for new Mcp Gateway Registry vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Aws Mcp Gateway Registry Security Vulnerabilities
Amazon mcp-gateway-registry <1.35.0 SSRF in registration API
CVE-2026-125926
8.5 - High
- November 11, 2026
Server-side request forgery (SSRF) in the server registration and update API in Amazon mcp-gateway-registry before 1.35.0 might allow an authenticated remote user to send requests from the gateway to internal network services and cloud instance metadata endpoints and read the responses via a crafted request. To remediate this issue, users should upgrade to version 1.35.0.
SSRF
Amazon mcp-gateway-registry <1.25 Auth bypass in external mgmt API
CVE-2026-100307
8.8 - High
- November 11, 2026
Missing authorization in the external management API in Amazon mcp-gateway-registry 1.0.9 through 1.24.7 might allow an authenticated remote user to assign the registry administrator scope to their own identity group and obtain administrative control of every registered gateway asset via a crafted group import request. To remediate this issue, users should upgrade to version 1.25.0.
AuthZ
Amazon mcp-gateway-registry <1.0.13 SQLi via retention policy
CVE-2026-14471
8.1 - High
- July 06, 2026
Improper Neutralization of Special Elements in the metrics-service retention policy management component in Amazon mcp-gateway-registry before 1.0.13 might allow an authenticated remote user to execute arbitrary SQL queries via a crafted table_name value that is interpolated into SQL statements in identifier position. To remediate this issue, users should upgrade to version 1.0.13 or later.
SQL Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Aws Mcp Gateway Registry or by Aws? Click the Watch button to subscribe.
