Skip to content
OpenAdvisories

Product · AWS

aws-serverless-mcp-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-116635

    Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server (aws-serverless-mcp-server) before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files o…

    AWS aws-serverless-mcp-server