{"data":{"id":"98216d30-7528-4384-bd18-46466a754edf","title":"GHSA-29w2-fq35-v728: AWS API MCP Server Security Policy Bypass via Startup Initialization Failure","summary":"The AWS API MCP Server, an open source Model Context Protocol server for running AWS CLI commands, skips its per-request security policy check for the lifetime of the process if the policy enforcement data fails to load at startup. Deny and gate rules are then not consulted, so restricted AWS API operations execute, though IAM permissions on the configured credentials still apply. Affected versions are >= 0.2.13 and < 1.3.47.","solution":"Fixed in awslabs.aws-api-mcp-server version 1.3.47. Until upgrading, use least-privilege IAM credentials (for example, a ReadOnlyAccess role) scoped to the task, or restart the server once connectivity is restored if it started during degraded connectivity.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-29w2-fq35-v728","publishedAt":"2026-07-24T22:33:19.000Z","cveId":"CVE-2026-16584","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["awslabs.aws-api-mcp-server@>= 0.2.13, < 1.3.47 (fixed: 1.3.47)"],"affectedPackageNames":["awslabs-aws-api-mcp-server"],"affectedPackageRefs":["pypi:awslabs-aws-api-mcp-server"],"affectedVendors":["Amazon"],"affectedVendorsRaw":["AWS API MCP Server"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00227,"epssCheckedAt":"2026-11-04T12:08:34.339Z","kevDateAdded":null,"advisoryAliases":["GHSA-29w2-fq35-v728"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-07-24T22:33:19.000Z","fixReleasedAt":"2026-07-22T14:26:25.986Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:32:36.432Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"awslabs.aws-api-mcp-server","fixedVersion":"1.3.47","matchedVersion":"1.3.47","fixReleasedAt":"2026-07-22T14:26:25.986Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:32:36.286Z"}]}}