CVE-2026-116635

The AWS Serverless MCP Server (aws-serverless-mcp-server) versions prior to v0.2.1 is vulnerable to a path traversal issue in its deployment status component. An actor capable of influencing the MCP agent can exploit this via directory traversal sequences or absolute paths provided in the project...