{"data":{"id":"46f7c83e-7f12-4189-9540-8b94f6577dbe","title":"CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server","summary":"CVE-2026-116635 affects the deployment status component of the AWS Serverless MCP Server, versions below v0.2.1 of awslabs.aws-serverless-mcp-server. Under certain conditions, an improper limitation of a pathname to a restricted directory might let an actor who can influence the MCP agent read JSON files outside the intended deployment status directory. Where write access has been enabled, the same flaw might allow creating or overwriting JSON files outside that directory.","solution":"Fixed in v0.2.1 of awslabs.aws-serverless-mcp-server.","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-164-aws/","publishedAt":"2026-11-02T21:43:24.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["AWS Serverless MCP Server"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-02T21:43:24.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}