CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server
Imported from official source
Bulletin ID: 2026-149-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/23/2026 12:00 PM PDT Description: AWS MCP Server is a managed server that gives AI agents access to AWS through the Model Context Protocol (MCP), including a run_script tool that runs Python scripts in a sandboxed environment. …
This version
- Version
- 1 of 1
- Recorded
- October 28, 2026 23:00
- Change
- Initial
- Content hash
254cd44d468ce5a8f362e9124e653976- All versions
- Revision history