Evidence · DiggingBeagle record
MCP Gateway Registry advisory GHSA-rxf3-qgpv-wxvr
Primary or origin disclosure used to qualify the underlying mechanism, stated prerequisites and limits. CVE-2026-100307 GHSA-rxf3-qgpv-wxvr: /api/servers/groups/import was authenticated but not correctly authorized. Low-privilege identity maps own IdP group to mcp-registry-admin; on next request obtains administrative control over MCP server/agent definitions and decrypted backend credentials. Persisted group_mappings and ui_permissions survive upgrade, previously revealed credentials survive until rotated.
- Source role
- primary disclosure
Evidence record
Primary or origin disclosure used to qualify the underlying mechanism, stated prerequisites and limits. CVE-2026-100307 GHSA-rxf3-qgpv-wxvr: /api/servers/groups/import was authenticated but not correctly authorized. Low-privilege identity maps own IdP group to mcp-registry-admin; on next request obtains administrative control over MCP server/agent definitions and decrypted backend credentials. Persisted group_mappings and ui_permissions survive upgrade, previously revealed credentials survive until rotated.
Claim-level citations (3)
- supportsMCP Gateway Registry group import let a low-privilege caller acquire admin mappings: The MCP Gateway Registry advisory confirms that authentication without role checks on group-import and sibling management routes could let a normal user assign their IdP group the mcp-registry-admin scope and become administrator on the next request.
GHSA-rxf3-qgpv-wxvr, Impact, sibling routes and Patched versions
- supportsMCP Gateway Registry group import let a low-privilege caller acquire admin mappings: The advisory documents a vulnerability and patch at 1.25.0; it does not establish a real compromised tenant, decrypted customer secret or attacker-operated campaign.
GHSA-rxf3-qgpv-wxvr, Description, Impact and Patched versions
- supportsMCP Gateway Registry group import let a low-privilege caller acquire admin mappings: The agentic-community MCP Gateway Registry accepted an authenticated group-import request without checking the caller had authority to change group mappings. A user could map their own identity-provider group to mcp-registry-admin and obtain elevated gateway capabilities on a subsequent request.
GHSA-rxf3-qgpv-wxvr, Description, Impact and Patched versions