CVE-2026-15415

The CVE-2026-15415 entry concerns the AWS HealthOmics MCP Server (aws-healthomics-mcp-server) before version 0.0.36. The vulnerability is a path traversal in the linting tools that can let an actor who can influence the MCP agent write actor-controlled content to arbitrary locations outside the i...