AWS MCP Gateway & Registry vulnerabilities

1 vulnerability

Known vulnerabilities in AWS MCP Gateway & Registry, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.6CVE-2026-14471awsmcp gateway & registry
EPSS score
0.58%
Improper Neutralization of Special Elements in the metrics-service retention policy management component in Amazon mcp-gateway-registry before 1.0.13 might allow an authenticated remote user to execute arbitrary SQL queries via a crafted table_name value that is interpolated into SQL statements in identifier position. To remediate this issue, users should upgrade to version 1.0.13 or later.