Skip to content

Product

AWS API MCP Server vulnerabilities

1 published CVE affecting AWS API MCP Server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest AWS API MCP Server CVEs

Newest publication first

  1. CVE-2026-4270 AWS API MCP File Access Restriction Bypass

    Published
    MediumCVSS 6.8 EPSS 0.15%

    Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may allow the bypass of intended file access restriction and expose arbitrary local file contents in the MCP client applicat...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.