PT-2026-29110 · Amazon Web Services · Aws-Mcp-Server

Published 2026-03-30 · Updated 2026-04-21 · CVE-2026-5059

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions aws-mcp-server (affected versions not specified)

Description aws-mcp-server is affected by a command injection issue that allows for remote code execution. This issue is related to the AWS CLI. It has been identified as a zero-day.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-5059

GHSA-FGMX-XFP3-W28P

ZDI-26-245

Affected Products

Aws-Mcp-Server

References · 11

• https://zerodayinitiative.com/advisories/ZDI-26-245 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-5059 · Security Note
• https://osv.dev/vulnerability/GHSA-fgmx-xfp3-w28p · Vendor Advisory
• https://github.com/alexei-led/aws-mcp-server · Note
• https://twitter.com/0dayPublishing/status/2043746016415903785 · Twitter Post
• https://twitter.com/autumn_good_35/status/2039896025910178023 · Twitter Post
• https://twitter.com/CveFindCom/status/2042780545608720669 · Twitter Post
• https://twitter.com/CVEnew/status/2045972441533743450 · Twitter Post
• https://twitter.com/pulsepatchio/status/2044248596627796124 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2042822925619696117 · Twitter Post
• https://twitter.com/TheZDIBugs/status/2039803048961122505 · Twitter Post