CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

Published 2026-10-23T19:09:22Z•ebc89964e953de08e7c2f5b9583a9c539e8d862bc310b348e31c89eaa6f4d083

Source metadata

Publication date
2026-10-23T19:09:22Z
Source identifier
5cabfa4b1da69d944ee6a9fb023e0f77c8d52d36
Public record ID
record:sha256:ebc89964e953de08e7c2f5b9583a9c539e8d862bc310b348e31c89eaa6f4d083

This is source-provided metadata, not an enriched summary or an impact assessment. Follow the canonical source link for the published material.

Evidence and limitations

Source ID
aws_security_bulletins
Record identifier
ebc89964e953de08e7c2f5b9583a9c539e8d862bc310b348e31c89eaa6f4d083
Record type
Source metadata

This record may overlap with other records. Source metadata can be incomplete or change. Validate consequential decisions against the linked source and your own environment.