Skip to content
OpenAdvisories

Product · AWS

AWS MCP Server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2026-115845

    Incomplete validation in the run_script Python sandbox in AWS MCP Server

    An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script. AWS fixed this…

    AWS AWS MCP Server