medium · CVSS v3 6.1 · CVSS v4 6.9

CVE-2026-116635

The AWS Serverless MCP Server before v0.2.1 contains a directory traversal flaw in its deployment status component. An attacker who can infl

Overview

The AWS Serverless MCP Server before v0.2.1 contains a directory traversal flaw in its deployment status component. An attacker who can influence the MCP agent can read or write JSON files outside the intended directory, exposing sensitive data or altering deployment status. This could compromise configuration confidentiality and integrity.

Description

Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server (aws-serverless-mcp-server) before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status directory. Where write access has been enabled, to create or overwrite JSON files outside that directory. This issue is reachable through directory traversal sequences or an absolute path supplied in the project name input. To remediate this issue, users should upgrade to version v0.2.1.

Impact

Confidentiality: attackers can read sensitive JSON files. Integrity: they can overwrite files, potentially altering deployment status. Availability is not directly impacted. Defenders: AWS customers running MCP Server.

Remediation

Upgrade to v0.2.1 or later. Verify that the deployment status directory is properly restricted. If upgrade is not possible, restrict agent influence or disable write access to the status directory.

Risk context

Medium severity; CVSS v3 6.1 and v4 6.9 indicate moderate risk. No EPSS data available. Defenders should address promptly but it is not an emergency.

Affected products

  • AWS Serverless MCP Server

Scores

Severity
medium
CVSS v2
5.6
CVSS v3
6.1
CVSS v4
6.9
EPSS
—

directory-traversal aws serverless mcp-server confidentiality integrity medium

← All CVEs

Related CVEs

medium

CVE-2026-120237

A flaw in ag-ui-protocol ag-ui up to 0.0.58 allows manipulation of the isInterruptExpired function, leading to excessive resource consumption. The vulnerability can be exploited remotely and an exploit is publicly available. Patching to a fixed version is required to mitigate the risk.

View analysis

medium

CVE-2026-120334

A path‑traversal flaw exists in deepset‑ai farm 0.8.0 and earlier, allowing remote attackers to read arbitrary files via the vocab_filename argument in EmbeddingTokenizer.from_pretrained. The vulnerability is publicly known and can be exploited without authentication. It affects any deployments of the unsupported farm library.

View analysis

medium

CVE-2026-120343

A cross-site scripting (XSS) vulnerability exists in the manageassessment2.php file of the CloudClassroom-PHP-Project. This flaw allows remote attackers to inject malicious scripts via the ExamName and question parameters. The issue is significant because the vendor is unresponsive, leaving users without an official patch.

View analysis

medium

CVE-2026-58969

In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

View analysis