CVE-2026-116635Medium· 6.1▾ SunlitImproper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server (aws-serverless-mcp-server) before v0.2.1 might allow an actor who can influence the MCP agent to read the co…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server (aws-serverless-mcp-server) before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status directory. Where write access has been enabled, to create or overwrite JSON files outside that directory. This issue is reachable through directory traversal sequences or an absolute path supplied in the project name input.
To remediate this issue, users should upgrade to version v0.2.1.
aws-serverless-mcp-server < 0.2.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115812Critical· 9.8Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server
CVE-2026-89065High· 7.1Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the…
CVE-2026-55062High· 8.4uniget is a universal installer and updater for (container) tools
CVE-2026-119084High· 8.1Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters
CVE-2026-119922High· 8.8Babelfish for PostgreSQL Privilege Escalation
CVE-2026-121652Medium· 5.4Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering