Aws Labs Mysql Mcp Server
Monthly
Read-only enforcement bypass in Amazon awslabs mysql-mcp-server (versions ≤ 1.0.21) enables context-dependent actors - including AI models or users interacting via the Model Context Protocol - to reach file-read and file-write SQL execution paths that the mutable SQL detector is designed to gate. The detector relies on a regex engine that does not treat SQL inline comments as whitespace, allowing crafted queries containing comment tokens to pass the allowlist check while MySQL parses and executes the full underlying write or file-access statement. No public exploit has been identified at time of analysis; AWS has released a fix in version 1.0.23.
Read-only enforcement bypass in Amazon awslabs mysql-mcp-server (versions ≤ 1.0.21) enables context-dependent actors - including AI models or users interacting via the Model Context Protocol - to reach file-read and file-write SQL execution paths that the mutable SQL detector is designed to gate. The detector relies on a regex engine that does not treat SQL inline comments as whitespace, allowing crafted queries containing comment tokens to pass the allowlist check while MySQL parses and executes the full underlying write or file-access statement. No public exploit has been identified at time of analysis; AWS has released a fix in version 1.0.23.