PT-2025-23083 · Unknown · Aws-Mcp-Server

Raul Onitza-Klugman · Published 2025-05-28 · Updated 2025-09-08 · CVE-2025-5277

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions aws-mcp-server (affected versions not specified)

Description The issue is related to command injection. An attacker can craft a prompt that, once accessed by the MCP client, will run arbitrary commands on the host system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-5277

Affected Products

Aws-Mcp-Server

References · 12

• https://osv.dev/vulnerability/CVE-2025-5277 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5277 · Security Note
• https://github.com/alexei-led/aws-mcp-server/blob/94d20ae1798a43ac7e3a28e71900d774e5159c8a/src/aws_mcp_server/cli_executor.py#L92 · Note
• https://github.com/alexei-led/aws-mcp-server/commit/94d20ae1798a43ac7e3a28e71900d774e5159c8a · Note
• https://twitter.com/CveFindCom/status/1927721514742198553 · Twitter Post
• https://twitter.com/liran_tal/status/1955703157171851359 · Twitter Post
• https://twitter.com/CVEnew/status/1927722885432381598 · Twitter Post
• https://twitter.com/dukeoxdegen/status/1964867884754325860 · Twitter Post
• https://twitter.com/UjlakiMarci/status/1927825607137640950 · Twitter Post
• https://twitter.com/hackyboiz/status/1928787844727976266 · Twitter Post
• https://twitter.com/offseq/status/1927719039679258973 · Twitter Post
• https://twitter.com/cracbot/status/1929493253293740258 · Twitter Post