AWS mcp-gateway-registry SSRF can reach internal services (CVE-2026-125926)
Authenticated registrars could aim the gateway at internal addresses, including cloud metadata, until version 1.35.0.
1 stories, newest first · one card per story
Authenticated registrars could aim the gateway at internal addresses, including cloud metadata, until version 1.35.0.
Today 1.2K readers · 1.4K views · 281 reads · all time 195K views