Description
An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script.
AWS fixed this issue service-side. No customer action is required.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AWS | AWS MCP Server | N/A | — |
References
- https://aws.amazon.com/security/security-bulletins/2026-149-aws/ vendor-advisory