CVE-2026-115845

Medium

Description

An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script. AWS fixed this issue service-side. No customer action is required.

SeverityMedium

CVSS6.4

Exploit probability—

ProductAWS MCP Server

PublishedOct 23, 2026

First seenOct 23, 2026

Weakness typeCWE-184CWE-184

How to fix

Vendor advisories

aws.amazon.com/security/security-bulletins/2026-149-aws/

Affected products

Product	Affected versions	Fixed in
AWS AWS MCP Server	No range specified	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.