AmazonAnalysisAWS patches authorization bypass and SSRF flaws in open-source MCP Gateway Registry
What happened.Amazon Web Services published security bulletins resolving missing authorization and server-side request forgery vulnerabilities in its open-source MCP Gateway Registry.
Why it matters.Model Context Protocol registries connect artificial intelligence agents to cloud tools. When authorization checks fail, threat actors hijack agent tool routing and intercept private requests. Cloud architects must upgrade registries to version 1.25.0 immediately and audit scope databases.
The technical specifications:
- Authorization bypass: Tracked as CVE-2026-100307 in bulletin 2026-179-AWS, management endpoints authenticated callers but failed to enforce role-based authorization checks.
- Privilege escalation: Low-privileged callers submitted group import requests to map identity groups to registry administrator scopes, securing full control over registered tools.
- Request forgery flaw: Tracked as CVE-2026-125926 in bulletin 2026-180-AWS, improper upstream validation allowed users to force the gateway into probing internal networks.
- Affected versions: Vulnerabilities affected mcp-gateway-registry versions 1.0.9 through 1.24.7 for authorization and 1.0.3 through 1.34.0 for request forgery.
- Remediation release: AWS published patched version 1.25.0 and advised administrators to audit DocumentDB scope stores for rogue group mapping entries.
STORYLINE PROGRESSION & CONTEXT
This report represents a verified evolution of prior newsroom intelligence: