Filtered by vendor Aws Subscriptions
Filtered by product Aws Mcp Server Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-115845 1 Aws 2 Aws-mcp-server, Aws Mcp Server 2026-10-24 6.4 Medium
An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script. AWS fixed this issue service-side. No customer action is required.