AWS Aws-Api-Mcp-Server
2 CVEs affecting AWS Aws-Api-Mcp-Server. Latest disclosed: 2026-10-27. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-115413 | High | 7.8 | 2026-10-27 | Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations wit… |
CVE-2026-16584 | High | 7.0 | 2026-07-23 | Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 might allow an actor to bypass the user-configured security pol… |