CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server
highvulnerability
security
Source: AWS Security BulletinsSeptember 9, 2026
Summary
Two vulnerabilities (CVE-2026-87912 and CVE-2026-87913) were found in AWS Security Agent plugins where the system doesn't verify that an S3 bucket (cloud storage container) actually belongs to the account using it. This allows attackers to intercept private source code archives containing sensitive data like credentials and infrastructure information by creating buckets with predictable names based on publicly known account identifiers.
Solution / Mitigation
Update aws-agents-for-devsecops to version 1.1.0 or later, and update AWS Security Agent MCP server to version 0.2.0 or later.
Classification
Attack Type
Data Extraction
Attack SophisticationModerate
Impact (CIA+S)
confidentialityintegrity
Affected Vendors
Amazon
Related Issues
Monthly digest — independent AI security research
Original source: https://aws.amazon.com/security/security-bulletins/rss/2026-105-aws/
First tracked: September 10, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 92%