Product
An authenticated remote attacker can exploit a missing authorization flaw in the Amazon mcp-gateway-registry external management API to escalate privileges and obtain administrative control over all registered gateway assets.