Skip to content
OpenAdvisories

Product · AWS

aws-transform-mcp-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-18953 Public exploit

    Improper limitation of a pathname to a restricted directory in aws-transform-mcp-server

    Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directory via the s…

    AWS aws-transform-mcp-server