Skip to content
OpenAdvisories

Product · AWS

AWS API MCP Server

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-4270

    AWS API MCP File Access Restriction Bypass

    Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may allow the bypass of intended file access restriction and expose arbitrary local file contents in th…

    AWS AWS API MCP Server awslabs-aws-api-mcp-server PyPI