2026-04-11 · 2026-Q2
aws-mcp-server Unauthenticated RCE via Command Injection
PrimaryL6Identity / RunSecondaryL5ConfigL1Credential
- Fixable:
- Yes, vendor patch
- Vendor response:
- Unknown
- In the wild:
- No
- Actor:
- Attacker
Target
aws-mcp-server (Model Context Protocol server for AWS CLI)
Impact
Unauthenticated remote attackers can execute arbitrary code on affected installations; full compromise of the MCP server and any AWS credentials it holds
Root Cause
Missing validation of a user-supplied string passed to a system call; improper handling of the allowed commands list