CVE-2026-85788— Incomplete list of disallowed inputs in awslabs mysql-mcp-server
Quick assessment
Affected
AWS AWS Labs MySQL MCP Server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
翻译： Amazon awslabs mysql-mcp-server 的可变 SQL 检测组件中，被禁止的输入列表不完整，可能导致特定上下文的攻击者绕过只读执行门控，并通过 SQL 内联注释（正则表达式引擎未将其视为空白字符）访问文件读取和文件写入的 SQL 汇点。 修复建议： 为修复此问题，用户应升级到版本 1.0.23。
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| AWS | AWS Labs MySQL MCP Server | ≤ 1.0.21 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-85788
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Incomplete list of disallowed inputs in awslabs mysql-mcp-server
Source: CVE Program / CVE List V5
Vulnerability Description
Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQL inline comments that the regex engine does not treat as whitespace.
To remediate this issue, users should upgrade to version 1.0.23.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不完整的黑名单
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| AWS | AWS Labs MySQL MCP Server | 0 ~ 1.0.21 | - |
|
II. Public POCs for CVE-2026-85788
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-85788
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-85788 (2)
IV. Related Vulnerabilities
Same vendor: AWS
-
CVE-2026-87913
Missing S3 bucket ownership verification in the AWS Security -
CVE-2026-87912
Missing S3 bucket ownership verification in the AWS Security -
CVE-2026-87911
Read-only enforcement bypass enabling operating system comma -
CVE-2026-84942
Stored Cross-Site Scripting via Vega Expression Function Byp -
CVE-2026-85781
Unverified access point ownership in Amazon EFS CSI Driver
Same weakness: CWE-184
-
CVE-2026-86199
PocketMine-MP before 5.43.1 Denial of Service via unauthenti -
CVE-2026-79696
Remote Code Execution in Google ADK for Python via Incomplet -
CVE-2026-82536
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe O -
CVE-2026-69624
Active Directory Certificate Services (AD CS) Tampering Vuln -
CVE-2026-70334
Visual Studio Code Security Feature Bypass Vulnerability
V. Comments for CVE-2026-85788
No comments yet