{"data":{"id":"8a852252-923e-4991-be90-0c7310fb69c4","title":"CVE-2026-18655: Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server (awslabs.","summary":"The Amazon MQ MCP Server (a tool for managing message brokers) has a vulnerability where attackers can use prompt injection (tricking an AI by hiding instructions in its input) to trick the system into sending RabbitMQ broker credentials or OAuth access tokens (digital keys that grant access to accounts) to a fake endpoint they control. This affects versions before 2.0.24 and requires a broker hostname to be set up in the client context.","solution":"Users should upgrade to version 2.0.24 to fix this vulnerability.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-18655","publishedAt":"2026-08-03T20:17:17.557Z","cveId":"CVE-2026-18655","cweIds":["CWE-923"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["Amazon","Amazon MQ","awslabs.amazon-mq-mcp-server"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-03T20:17:17.557Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0051"]}}