CVE-2026-116635

Name of the Vulnerable Software and Affected Versions AWS Serverless MCP Server versions prior to 0.2.1

Description Improper limitation of a pathname to a restricted directory in the deployment status component allows an actor who can influence the MCP agent to perform directory traversal. By supplying directory traversal sequences or an absolute path in the project name input, an attacker can read the contents of JSON files outside the intended deployment status directory. If write access is enabled, the actor may also create or overwrite JSON files outside that directory.

Recommendations Upgrade to version 0.2.1. Disable write access unless it is strictly required.