Skip to content
OpenAdvisories

Product · AWS

AWS Labs MySQL MCP Server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-85788

    Incomplete list of disallowed inputs in awslabs mysql-mcp-server

    Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQL inline comments th…

    AWS AWS Labs MySQL MCP Server