Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilityhigh

AWS patches MCP gateway registry SSRF that can reach internal services

2 sources · 2 articlesFirst reported Updated ()1
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

AWS fixed CVE-2026-125926 in mcp-gateway-registry 1.35.0; authenticated registrars could query internal services, with no confirmed exploitation.

AWS disclosed an important server-side request forgery flaw, CVE-2026-125926, in the open-source mcp-gateway-registry. Versions 1.0.3 through 1.34.0 did not validate upstream addresses on the server registration and update API, so a user already allowed to register or edit servers could make the gateway request internal services and, in some cases, read responses. A cloud-role deployment could expose instance-metadata credentials if that path was reachable. Version 1.35.0 validates those addresses. AWS credited researcher novice-22, did not confirm credential theft or active exploitation, and said a separate management-API fix in 1.25.0 does not cover this issue.

Key facts
  • CVE-2026-125926 affects mcp-gateway-registry versions 1.0.3 through 1.34.0.
  • Version 1.35.0 checks upstream addresses on registration and modification.
  • GitHub advisory rates the CWE-918 issue 8.5 High, according to GBHackers.
  • The 1.35.0 upgrade does not change or clean stored server entries.
  • Deployments from 1.25.0 through 1.34.0 remain affected by this CVE.
  • Helm installs using bundled Keycloak must adopt keycloak-client-secret before upgrading.
Analyze CVE-2026-125926 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Timeline

dated events in the reporting · oldest first
  1. Nov 11, 2026AWS disclosed CVE-2026-125926 and credited novice-22. · Cyber Security News

What each outlet adds

beyond the shared facts
  • Cyber Security NewsNo confirmed exploitation; interim limits on registration and outbound connections.
  • GBHackers8.5 High score, metadata-credential path, and Keycloak upgrade prerequisite.
CVEs
CVE-2026-125926
Vendors
AWS
Products
mcp-gateway-registry

Coverage

oldest first · one row per article · UTC
  1. · 2d ago Cyber Security NewsFirst report

    AWS mcp-gateway-registry SSRF fixed in 1.35.0 (CVE-2026-125926)

    An authenticated user who can register servers could make the gateway query internal services; exploitation is not confirmed.

  2. · 1d ago GBHackers

    AWS mcp-gateway-registry SSRF can reach internal services (CVE-2026-125926)

    Authenticated registrars could aim the gateway at internal addresses, including cloud metadata, until version 1.35.0.

Vulnerabilities in this story

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-125926
Authenticated SSRF in Amazon mcp-gateway-registry before 1.35.0
6.3—