CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

Summary

AWS MCP Server, a managed server that gives AI agents access to AWS through the Model Context Protocol, has an incomplete validation flaw tracked as CVE-2026-115845 in the Python code validator of its run_script tool. An authenticated remote user might exploit a crafted script to execute arbitrary code within their own isolated session environment.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Model Context Protocol

Related items

• HighCVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A ServerSame vendor · AWS Security Bulletins
• HighCVE-2026-112408 - Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()Same vendor · AWS Security Bulletins
• HighCVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro CrewSame vendor · AWS Security Bulletins
• MediumCVE-2026-110248 - Insertion of sensitive information into log files in Amazon SageMaker Python SDKSame vendor · AWS Security Bulletins
• HighCVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRFSame vendor · AWS Security Bulletins