Skip to content

CVE record · 2 sources

CVE-2026-85788

CVSS 5.5

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to…

Vendor: Amazon Web Services
CVSS: 5.5

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

14

AWS bulletin AWS 7d ago

CVE-2026-85788 - Issue with awslabs mysql-mcp-server

CVE-2026-85788 Amazon Web Services
8

CVE NVD 9 Sep 2026

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to…

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL…

CVSS 5.5 Fix available CVE-2026-85788