PT-2025-47332 · Unknown · Mcp-Server-Aws-Resources-Python

P0Lestar · Published 2025-11-18 · Updated 2025-12-31 · CVE-2025-63604

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions baryhuang/mcp-server-aws-resources-python version 0.1.0

Description A code injection issue exists due to insufficient input validation in the execute query method. This allows for remote code execution by exposing dangerous Python built-in functions (import, getattr, hasattr) in the execution namespace and directly using exec() to execute user-supplied code. An attacker can craft malicious queries to execute arbitrary Python code, potentially leading to AWS credential theft (AWS ACCESS KEY ID, AWS SECRET ACCESS KEY), file system access, and environment variable disclosure. This can result in system compromise and unauthorized access to sensitive AWS resources.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the execute query function until a patch is available.

Exploit

Fix

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2025-63604

Affected Products

Mcp-Server-Aws-Resources-Python

References · 6

• 🔥 https://github.com/baryhuang/mcp-server-aws-resources-python/issues/8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63604 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63604 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1990943607205806269 · Twitter Post
• https://t.me/cveNotify/147272 · Telegram Post
• https://twitter.com/CVEnew/status/1991066232645370268 · Twitter Post