CVE-2026-115845

An incomplete list of disallowed inputs in the Python code validator of the runscript tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script. AWS fixed this issue service-side. No customer action...

EUVD-2026-109127

An incomplete list of disallowed inputs in the Python code validator of the runscript tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script. AWS fixed this issue service-side. No customer action...

PT-2026-122202

Name of the Vulnerable Software and Affected Versions AWS MCP Server affected versions not specified Description An incomplete list of disallowed inputs in the Python code validator of the 'run script' tool allows an authenticated remote user to execute arbitrary code within their own isolated...

CVE-2026-56777

n8n before 2.25.7 and 2.26.x before 2.26.2 contains an abstract syntax tree AST security validator bypass in the Python Code node. An authenticated user with permission to create or modify workflows containing a Python Code node can bypass the validator and access the task executor module...