Mcp-Gateway-Registry (< 1.35.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/mcp-gateway-registry--1.35.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 22:12:21 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAmazon mcp-gateway-registry: Server-side request forgery (CVE-2026-125926)https://feed.craftedsignal.io/briefs/2026-11-amazon-mcp-gateway-ssrf-cve-2026-125926/Wed, 11 Nov 2026 22:12:21 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-amazon-mcp-gateway-ssrf-cve-2026-125926/An SSRF vulnerability in the Amazon mcp-gateway-registry server registration and update API allows authenticated remote users to access internal network services and cloud metadata endpoints.Amazon mcp-gateway-registry before version 1.35.0 is vulnerable to server-side request forgery (SSRF). An authenticated remote attacker can manipulate the server registration and update API to send unauthorized requests to internal network services or cloud instance metadata endpoints and retrieve the resulting information.

Impact

Successful exploitation allows an authenticated attacker to perform requests to internal services that may not be accessible from the public internet and to exfiltrate data from cloud instance metadata endpoints, which potentially contain sensitive configuration data or credentials.

Recommendation

Users of the Amazon mcp-gateway-registry should upgrade to version 1.35.0 or later to address the vulnerability in the server registration and update API.

]]>highadvisory