cbcvebase.

Alexei-Led Aws-Mcp-Server vulnerabilities

1 known vulnerability affecting alexei-led/aws-mcp-server.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-5277P2CRITICALCVSS 9.6fixed in 1.3.02025-05-28
CVE-2025-5277 [CRITICAL] CWE-78 CVE-2025-5277: aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that on aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system.
nvd
Alexei-Led Aws-Mcp-Server vulnerabilities | cvebase