aws-api-mcp-server vulnerabilities

Latest aws-api-mcp-server CVEs

Newest publication first

1. CVE-2026-125271 AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalization

   Published 2026-11-10

   High·CVSS 8.5 EPSS 0.37%

   Incorrect normalization of operation names in the custom security policy enforcement in awslabs aws-api-mcp-server before 1.5.1 might allow an actor to execute AWS API operations across AWS services that the operator's security policy was configured to deny or require elicitation...

2. CVE-2026-115413 AWS API MCP Server OAuth Token Audience Validation Bypass

   Published 2026-10-27

   High·CVSS 7.3 EPSS 0.10%

   Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server's configured AWS credentials via an access token issued to another application by the same identity provider...

3. CVE-2026-16584 AWS API MCP Server Security Policy Bypass via Startup Failure

   Published 2026-07-23

   High·CVSS 7.3 EPSS 0.23%

   Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 might allow an actor to bypass the user-configured security policy and execute AWS API operations that the policy was set to deny or gate. When initialization of the security policy en...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.