CVE-2026-14471 - Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registry
Bulletin ID: 2026-052-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 07/06/2026 13:45 PM PDT Description: Amazon mcp-gateway-registry is an open-source gateway and registry for Model Context Protocol (MCP) servers, providing centralized discovery, authentication/authorization, and proxying of MCP tools for AI agents. We identified CVE-2026-14471, an issue in the metrics-service retention policy management component where a caller-supplied table_name value is interpolated into SQL statements in identifier position without proper neutralization. An authenticated remote user is able to supply a crafted table_name value to execute arbitrary SQL queries against the metrics database. This allows the user to read stored data (including API key material) and to delete or alter stored data. Impacted versions: >=1.0.3 AND <=1.0.12 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
AI Analysis
Technical Summary
Amazon mcp-gateway-registry versions >=1.0.3 and <=1.0.12 contain an authenticated SQL injection vulnerability (CVE-2026-14471) in the metrics-service retention policy management component. The vulnerability is due to unsafe interpolation of a caller-supplied table_name value into SQL statements in identifier position without proper neutralization. An authenticated remote attacker can exploit this to execute arbitrary SQL queries against the metrics database, enabling reading, deletion, or alteration of stored data, including API key material. The issue is resolved in version 1.0.13. No workaround exists; upgrading to 1.0.13 or later is required.
Potential Impact
An authenticated remote user can exploit this vulnerability to execute arbitrary SQL commands on the metrics database. This can lead to unauthorized disclosure of sensitive data such as API keys, as well as deletion or modification of stored data. The impact includes potential compromise of confidentiality, integrity, and availability of the metrics data managed by mcp-gateway-registry.
Mitigation Recommendations
This vulnerability is fixed in mcp-gateway-registry version 1.0.13. Users should upgrade to version 1.0.13 or later to remediate the issue. There is no available workaround. Users should also ensure that any forked or derivative codebases are patched accordingly. Refer to the official GitHub repository for the latest release and updates.
CVE-2026-14471 - Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registry
Description
Bulletin ID: 2026-052-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 07/06/2026 13:45 PM PDT Description: Amazon mcp-gateway-registry is an open-source gateway and registry for Model Context Protocol (MCP) servers, providing centralized discovery, authentication/authorization, and proxying of MCP tools for AI agents. We identified CVE-2026-14471, an issue in the metrics-service retention policy management component where a caller-supplied table_name value is interpolated into SQL statements in identifier position without proper neutralization. An authenticated remote user is able to supply a crafted table_name value to execute arbitrary SQL queries against the metrics database. This allows the user to read stored data (including API key material) and to delete or alter stored data. Impacted versions: >=1.0.3 AND <=1.0.12 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Affected software
pkg:github/amazon/mcp-gateway-registryRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Amazon mcp-gateway-registry versions >=1.0.3 and <=1.0.12 contain an authenticated SQL injection vulnerability (CVE-2026-14471) in the metrics-service retention policy management component. The vulnerability is due to unsafe interpolation of a caller-supplied table_name value into SQL statements in identifier position without proper neutralization. An authenticated remote attacker can exploit this to execute arbitrary SQL queries against the metrics database, enabling reading, deletion, or alteration of stored data, including API key material. The issue is resolved in version 1.0.13. No workaround exists; upgrading to 1.0.13 or later is required.
Potential Impact
An authenticated remote user can exploit this vulnerability to execute arbitrary SQL commands on the metrics database. This can lead to unauthorized disclosure of sensitive data such as API keys, as well as deletion or modification of stored data. The impact includes potential compromise of confidentiality, integrity, and availability of the metrics data managed by mcp-gateway-registry.
Mitigation Recommendations
This vulnerability is fixed in mcp-gateway-registry version 1.0.13. Users should upgrade to version 1.0.13 or later to remediate the issue. There is no available workaround. Users should also ensure that any forked or derivative codebases are patched accordingly. Refer to the official GitHub repository for the latest release and updates.
Technical Details
- Article Source
- {"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-052-aws/","fetched":true,"fetchedAt":"2026-07-06T21:01:46.970Z","wordCount":218}
Threat ID: 6a4c17ba27e9c7971937dbbf
Added to database: 07/06/2026, 21:01:46 UTC
Last enriched: 07/06/2026, 23:11:06 UTC
Last updated: 07/07/2026, 01:06:14 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.