CVE-2026-97662 - Argument injection in AWS security-agent-mcp-server diff scan

Amazon Web Services Version 1 original current

Imported from official source

Bulletin ID: 2026-121-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/01/2026 10:30 AM PDT Description: security-agent-mcp-server is an open-source Model Context Protocol (MCP) server, published by AWS in the awslabs/mcp repository, that AI assistants use to run local security scans (including differential "diff" scans) over source code. …

This version

Version
1 of 1
Recorded
October 29, 2026 18:00
Change
Initial
Content hash
3a75e5a620ebdf0e0c033c912397e8aa
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.