{"data":{"id":"71e800ab-9e57-476d-bdf5-cfb596bdaed2","title":"CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass","summary":"CVE-2026-115413 affects the AWS API MCP Server in versions >=1.3.0 and <1.6.0 when it runs the streamable-http transport with OAuth authentication. The server checks a bearer token's signature, issuer and expiry but not the application audience claim, so a token issued to another application in the same tenant is accepted. This may allow AWS API calls using the credentials configured on the host.","solution":"Fixed in awslabs.aws-api-mcp-server version 1.6.0. Operators using AUTH_TYPE=oauth should also set AUTH_AUDIENCE, or AUTH_CLIENT_ID for identity providers whose access tokens carry no audience claim, such as Amazon Cognito. Workaround: use the default stdio transport rather than streamable-http.","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-152-aws/","publishedAt":"2026-11-03T18:58:52.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["AWS API MCP Server","Amazon Cognito"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-03T18:58:52.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}