6 matches found
CVE-2026-116635
Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server aws-serverless-mcp-server before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status...
CVE-2026-116635
The AWS Serverless MCP Server (aws-serverless-mcp-server) versions prior to v0.2.1 is vulnerable to a path traversal issue in its deployment status component. An actor capable of influencing the MCP agent can exploit this via directory traversal sequences or absolute paths provided in the project...
EUVD-2026-115643
Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server aws-serverless-mcp-server before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status...
CVE-2026-116635 Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server aws-serverless-mcp-server before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status...
CVE-2026-116635: AWS aws-serverless-mcp-server: Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless…
Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server aws-serverless-mcp-server before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status...
PT-2026-135825
Name of the Vulnerable Software and Affected Versions AWS Serverless MCP Server versions prior to 0.2.1 Description Improper limitation of a pathname to a restricted directory in the deployment status component allows an actor who can influence the MCP agent to perform directory traversal. By...