CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

Mcp Server ยท 2026-10-23

Actions

Rate this issue

Technical Details

Regions all
CVE IDs CVE-2026-115845
Cost Impact Neutral

What This Means

For DevOps Teams

Monitor the AWS MCP Server for the security patch deployment addressing CVE-2026-115845, ensuring no customer action is required but staying informed on the resolution status.

For Platform Teams

Integrate the security enhancements in AWS MCP Server to maintain a robust and secure environment for AI agent operations, leveraging the managed service benefits.

For Executives

Implement the security patch for CVE-2026-115845 to mitigate risk of arbitrary code execution within isolated sessions, ensuring the integrity and security of AI agent operations on AWS MCP Server.

Source

View original AWS announcement โ†’

Weekly AWS Digest in Your Inbox

No spam, no headlines. Just a weekly summary of the 3โ€“7 AWS changes that matter for DevOps and Platform teams.

๐Ÿ“ง Exactly 1 email per week โ€ข Every Tuesday โ€ข Unsubscribe anytime

Today: AWS only. Coming next: Azure and other major clouds.