AWS has fixed a server-side request forgery flaw in mcp-gateway-registry that could let an authenticated attacker reach internal services through the gateway. Tracked as CVE-2026-125926, the issue affects versions 1.0.3 through 1.34.0. Version 1.35.0 contains the fix. AWS disclosed the vulnerability on November 11, 2026, and urged users to upgrade. The open-source project acts as […]
This article has been indexed from Cyber Security News
Read the original article:
AWS MCP Gateway Security Flaw Allowing Access to Internal Networks and Cloud Credentials