PT-2026-51547 · Amazon · Amazon
CVE-2026-12957
·
Published
2026-06-23
·
Updated
2026-07-12
CVSS v4.0
8.5
High
| Vector | AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Language Servers for AWS versions prior to 1.65.0
Description
Improper trust boundary enforcement in the Model Context Protocol (MCP) server configurations within Amazon Q Developer allows for arbitrary code execution. If a local user opens a maliciously crafted workspace and trusts it when prompted, commands within the project configuration files may be automatically executed. This flaw can be exploited by malicious repositories to exfiltrate cloud credentials from the developer's environment without further consent or authentication.
Recommendations
Upgrade Language Servers for AWS to version 1.65.0 or higher.
Exploit
Fix
LPE
Incorrect Permission
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Amazon