Mcp-Gateway-Registry (1.0.9-1.24.7) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/mcp-gateway-registry-1.0.9-1.24.7/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 22:12:14 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAmazon mcp-gateway-registry: Missing authorization in management API (CVE-2026-100307)https://feed.craftedsignal.io/briefs/2026-11-amazon-mcp-gateway-registry-auth-bypass-cve-2026-100307/Wed, 11 Nov 2026 22:12:14 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-amazon-mcp-gateway-registry-auth-bypass-cve-2026-100307/An authenticated remote attacker can exploit a missing authorization flaw in the Amazon mcp-gateway-registry external management API to escalate privileges and obtain administrative control over all registered gateway assets.Amazon mcp-gateway-registry versions 1.0.9 through 1.24.7 contain a missing authorization vulnerability (CVE-2026-100307) in the external management API. An authenticated remote attacker can exploit this flaw by sending a crafted group import request to assign the registry administrator scope to their own identity group. This allows the attacker to obtain administrative control of all registered gateway assets.

Impact

Successful exploitation results in full administrative control over all registered gateway assets managed by the vulnerable service. The vulnerability is rated with a CVSS v3.1 base score of 8.8.

Recommendation

Upgrade the Amazon mcp-gateway-registry service to version 1.25.0 or later immediately to resolve the missing authorization flaw.

]]>highadvisorycveprivilege-escalationcloud