CVE-2026-85788: Incomplete list of disallowed inputs in awslabs mysql-mcp-server

Q: What access and interaction are required to exploit this issue?

The vulnerability is locally exploitable without prior privileges, but it requires user interaction. Exploitation relies on SQL inline comments that the mutable SQL detector's regex engine does not recognize as whitespace.

Q: What security boundary can be bypassed?

An attacker may bypass the read-only enforcement gate in the mutable SQL detector. This can allow access to SQL file-read and file-write sinks.

Q: Which version addresses the issue?

Upgrade awslabs/mysql-mcp-server to version 1.0.23.

Published Sep 9, 2026

Updated

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQL inline comments that the regex engine does not treat as whitespace.

To remediate this issue, users should upgrade to version 1.0.23.

Affected Software

1 affected component

awslabs/mysql-mcp-server<=1.0.22

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade awslabs mysql-mcp-server to a version that resolves this vulnerability.
Fixed in 1.0.23

Event History

Sep 9, 2026

CVE Published

via MITRE·04:24 PM

Data Sourced

via MITRE·04:24 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access and interaction are required to exploit this issue?

The vulnerability is locally exploitable without prior privileges, but it requires user interaction. Exploitation relies on SQL inline comments that the mutable SQL detector's regex engine does not recognize as whitespace.

What security boundary can be bypassed?