CVE-2026-18954 - Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server
highvulnerability
security
Source: AWS Security BulletinsAugust 5, 2026
Summary
CVE-2026-18954 is an authorization bug in Amazon DocumentDB MCP Server (a tool that lets AI assistants access databases). The bug allows certain database operations called aggregation pipeline stages ($out and $merge, which are write operations) to bypass read-only protections, potentially letting an authenticated user make unwanted changes to the database.
Solution / Mitigation
Update to version 1.0.12 or later.
Classification
Attack SophisticationModerate
Impact (CIA+S)
integrityavailability
AI Component TargetedAPI
Affected Vendors
Amazon
Related Issues
Monthly digest — independent AI security research
Original source: https://aws.amazon.com/security/security-bulletins/rss/2026-076-aws/
First tracked: August 5, 2026 at 08:01 PM
Classified by LLM (prompt v3) · confidence: 92%