AWS has disclosed a server-side request forgery (SSRF) flaw in mcp-gateway-registry, an open-source registry and gateway for Model Context Protocol (MCP) servers. Tracked as CVE-2026-125926 under bulletin 2026-180-AWS, the issue lets an authenticated user make the gateway send requests to services on a deployment’s internal network. AWS rates the bulletin “Important”, and the GitHub advisory […]
This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Read the original article: