PT-2026-25773 · Amazon Web Services · Aws Api Mcp Server

Published 2026-03-16 · Updated 2026-05-15 · CVE-2026-4270

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions AWS API MCP Server versions 0.2.14 through 1.3.8

Description The AWS API MCP Server, used to enable AI assistants to interact with AWS services, has an issue where file access restrictions can be bypassed. This affects the 'no-access' and 'workdir' features, potentially exposing arbitrary local file contents to the MCP client application context. The server acts as a bridge between AI assistants and AWS services, allowing management of AWS infrastructure. It includes a configurable file access feature that controls how AWS CLI commands interact with the local file system.

Recommendations Upgrade to version 1.3.9.

Fix

Weakness Enumeration

CWE-424

Related Identifiers

CVE-2026-4270

GHSA-2CPP-J2FC-QHP7

PYSEC-2026-162

Affected Products

Aws Api Mcp Server

References · 10

• https://aws.amazon.com/security/security-bulletins/2026-007-AWS · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4270 · Security Note
• https://pypi.org/project/awslabs.aws-api-mcp-server/1.3.9 · Patch
• https://osv.dev/vulnerability/GHSA-2cpp-j2fc-qhp7 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-162 · Vendor Advisory
• https://github.com/awslabs/mcp · Note
• https://github.com/awslabs/mcp/security/advisories/GHSA-2cpp-j2fc-qhp7 · Note
• https://twitter.com/VulmonFeeds/status/2033612815441723546 · Twitter Post
• https://twitter.com/AwsSecDigest/status/2055375922350452832 · Twitter Post
• https://twitter.com/DarFazulyanov/status/2035401419621269748 · Twitter Post