{"data":{"id":"bf5c0bd7-f6a3-4ec8-a063-565ae7ad200f","title":"CVE-2025-5277: aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the…","summary":"CVE-2025-5277 affects the aws-mcp-server MCP server, which is vulnerable to command injection under CWE-78. An attacker can craft a prompt that, once accessed by the MCP client, runs arbitrary commands on the host system. Snyk scored it CVSS 4.0 9.4 (Critical) with no user privileges required and user interaction required; NIST had not yet provided an assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-5277","publishedAt":"2025-05-28T14:15:35.827Z","cveId":"CVE-2025-5277","cweIds":["CWE-78","CWE-78"],"cvssScore":"9.6","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["aws-mcp-server","MCP"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"aws-mcp-server command injection via crafted prompts","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01251,"epssCheckedAt":"2026-11-04T18:09:12.821Z","kevDateAdded":null,"advisoryAliases":["GHSA-m4qw-j7mx-qv6h"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:35.494Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}