Critical: mcp-gateway-registry Authorization Bypass Lets Attackers Grab Admin Rights

Amazon mcp-gateway-registry versions 1.0.9 through 1.24.7 have a nasty authorization flaw in their external management API. An authenticated attacker can exploit this to escalate privileges and become a registry admin, gaining full control over all registered gateways. You need to update immediately if you're running any affected version. Check the official advisory for patched versions and migration details.