Product

AWS Security Agent MCP server vulnerabilities

1 published CVE affecting AWS Security Agent MCP server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest AWS Security Agent MCP server CVEs

Newest publication first

CVE-2026-87913 Missing S3 bucket ownership verification in the AWS Security Agent MCP server
Published 2026-09-10

MediumCVSS 5.1 EPSS 0.44%

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-regis...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

AWS Security Agent MCP server vulnerabilities

Latest AWS Security Agent MCP server CVEs

CVE-2026-87913 Missing S3 bucket ownership verification in the AWS Security Agent MCP server