amazon aws api mcp server vulnerabilities (CVE)

CVE records published for amazon aws api mcp server, newest first. Follow to get an email when a new one appears.

1 results

5.5Medium

CVE-2026-4270 8 months ago

AWS API MCP File Access Restriction Bypass

AWS AWS API MCP Server

Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may allow the bypass of intended file access restriction and expose arbitrary local file contents in th…