MCP Gateway Registry advisory GHSA-fc39-fwh3-wv5r

Evidence record

Primary or origin disclosure used to qualify the underlying mechanism, stated prerequisites and limits. CVE-2026-125926 GHSA-fc39-fwh3-wv5r: authenticated server registrant controls upstream URL; registry requests internal services and in some setups returns response. Possible EC2 metadata/role credential reach depends on actual network/IMDS controls. Fix checks new and modified URLs, does not purge old malicious registrations.

Read the original source ↗

Claim-level citations (3)

• supportsMCP Gateway Registry let server registrants request internal URLs: The MCP Gateway Registry SSRF advisory says version 1.35.0 rejects newly registered or updated private upstream destinations but does not automatically remove hostile upstream URLs stored before patching.

  GHSA-fc39-fwh3-wv5r, Impact and Patches, persisted registrations

• supportsMCP Gateway Registry let server registrants request internal URLs: The advisory for CVE-2026-125926 does not document live metadata theft, a customer compromise or exploitation of the separate group-import authorization issue.

  GHSA-fc39-fwh3-wv5r, server URL registration, SSRF impact and remediation

• supportsMCP Gateway Registry let server registrants request internal URLs: A different MCP Gateway Registry flaw accepted a server registrant-controlled upstream URL and could issue network requests to destinations that should have remained private. In some configurations the upstream response could return through the registry.

  GHSA-fc39-fwh3-wv5r, server URL registration, SSRF impact and remediation