[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBjxZ4XIR2UjPshgfLJMKN4rUn0cpEfUlpP-IOTjvsCw":3},{"article":4,"iocs":41,"watch_terms":46,"solutions":47,"lesson":133},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"96b9ac9f-a08a-4483-9b91-f697fbbdd42c","AWS MCP Gateway Security Flaw Allowing Access to Internal Networks and Cloud Credentials","aws-mcp-gateway-security-flaw-allowing-access-to-internal-networks-and-cloud-cre-c2ad66","AWS has fixed a server-side request forgery flaw in mcp-gateway-registry that could let an authenticated attacker reach internal services through the gateway. Tracked as CVE-2026-125926, the issue affects versions 1.0.3 through 1.34.0. Version 1.35.0 contains the fix. AWS disclosed the vulnerability on November 11, 2026, and urged users to upgrade. The open-source project acts as […] The post AWS MCP Gateway Security Flaw Allowing Access to Internal Networks and Cloud Credentials appeared first on Cyber Security News.","AWS has patched a server-side request forgery vulnerability in its mcp-gateway-registry, tracked as CVE-2026-125926. The flaw, affecting versions 1.0.3 through 1.34.0, allows authenticated users to make the gateway send requests to internal services and potentially access cloud credentials if the gateway has an attached cloud role. Version 1.35.0 includes the fix, and AWS urges users to upgrade and review existing configurations.","AWS MCP Gateway registry flaw (CVE-2026-125926) allows authenticated attackers to access internal networks and cloud","https:\u002F\u002Fcybersecuritynews.com\u002Faws-mcp-gateway-security-flaw\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FAWS-MCP-Gateway-security-flaw.webp","2026-11-12T13:51:59+00:00","2026-11-12T14:00:25.537858+00:00",8,[17,20],{"name":18,"type":19},"mcp-gateway-registry","product",{"name":21,"type":22},"AWS","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":25,"name":26,"slug":27},null,"Vulnerabilities","vulnerabilities",[29,31,36],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42],{"type":43,"value":44,"context":45},"cve","CVE-2026-125926","AWS MCP Gateway security flaw",[21,18],{"controls":48,"vendors":132},[49,78,106],{"slug":50,"name":51,"problem":52,"products":53},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"slug":79,"name":80,"problem":81,"products":82},"patch-management","Automated patch management","Known holes get closed in days, not months.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":79,"product_name":103,"url":104,"description":105},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":107,"name":108,"problem":109,"products":110},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[111,119,124],{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":120,"product_name":121,"url":122,"description":123},"defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",[],{"slug":134,"title":135,"body":136,"framework_refs":137,"framework_notes":143},"ssrf-flaw-in-aws-mcp-gateway-exposed-internal-networks-and-cloud-credentials","SSRF Flaw in AWS MCP Gateway Exposed Internal Networks and Cloud Credentials","A server-side request forgery (SSRF) vulnerability in AWS's mcp-gateway-registry allowed authenticated users to coerce the gateway into making internal requests on their behalf, potentially reaching cloud metadata services and harvesting attached IAM role credentials. This is a classic SSRF risk that is amplified in cloud environments where instance metadata endpoints (e.g., IMDSv1) can expose powerful credentials without additional authentication. The vulnerability persisted across a wide version range (1.0.3–1.34.0), indicating that SSRF protections were not part of the original design or review process. The incident underscores how a single unvalidated outbound request path in an internet-facing service can pivot into full cloud account compromise if roles are over-permissioned or metadata protections are absent.",[138,139,140,141,142],"OWASP A10:2021 Server-Side Request Forgery","CIS Control 7: Continuous Vulnerability Management (v8)","NIST SP 800-53 SI-10: Information Input Validation","NIST SP 800-53 AC-6: Least Privilege","NIS2 Article 21(2)(e)",{"NIS2 Article 21(2)(e)":144,"NIST SP 800-53 AC-6: Least Privilege":145,"OWASP A10:2021 Server-Side Request Forgery":146,"NIST SP 800-53 SI-10: Information Input Validation":147,"CIS Control 7: Continuous Vulnerability Management (v8)":148},"This point requires security in acquisition, development and maintenance including vulnerability handling; embedding SSRF testing during development and promptly disclosing and patching the flaw aligns with what this article demands.","AC-6 mandates that cloud roles and service accounts hold only the permissions necessary for their function; limiting the gateway's attached role would have reduced the blast radius if credentials were accessed.","This control directly covers SSRF vulnerabilities where an application fetches remote resources without validating the user-supplied URL, which is exactly the mechanism exploited here.","SI-10 requires that systems validate all inputs before processing; enforcing strict allowlist validation on URLs the gateway is permitted to request would have prevented the SSRF exploitation.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities in software; timely discovery and patching of CVE-2026-125926 across the affected version range would have been mandated by this control."]