Directory Traversal Vulnerability in AWS Serverless MCP Server
CVE-2026-116635

6.9MEDIUM

Key Information:

Vendor

Aws

Status
Aws-serverless-mcp-server
Vendor
CVE Published:
2 November 2026

What is CVE-2026-116635?

A vulnerability exists in the AWS Serverless MCP Server prior to version v0.2.1 that allows an actor to exploit improper limitations on pathnames. This could enable unauthorized access to sensitive JSON files stored outside the intended deployment status directory. An attacker could leverage directory traversal sequences or provide absolute paths within project name inputs to read or potentially modify JSON files. To mitigate these risks, it is essential to upgrade to version v0.2.1 or later.

Affected Version(s)

aws-serverless-mcp-server 0 < 0.2.1

References

https://pypi.org/project/awslabs.aws-serverless-mcp-serve...
release-notespatch
https://aws.amazon.com/security/security-bulletins/2026-1...
vendor-advisory
https://github.com/awslabs/mcp/security/advisories/GHSA-r...
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.