Is CVE-2026-14471 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-14471?

CVE-2026-14471 has a CVSS v3 severity of HIGH (8.1).

Back

CVE-2026-14471

Description

Improper Neutralization of Special Elements in the metrics-service retention policy management component in Amazon mcp-gateway-registry before 1.0.13 might allow an authenticated remote user to execute arbitrary SQL queries via a crafted table_name value that is interpolated into SQL statements in identifier position. To remediate this issue, users should upgrade to version 1.0.13 or later.