CVE-2026-97662 - Argument injection in AWS security-agent-mcp-server diff scan
Security ยท 2026-10-01
Actions
Technical Details
| Affected Versions | >= 0.1.1 AND < 0.2.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-97662 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update security-agent-mcp-server to version 0.2.0 to address the argument injection vulnerability (CVE-2026-97662) and ensure the server operates in a least-privileged, isolated environment until the upgrade is complete.
For Platform Teams
Deploy the patched security-agent-mcp-server version 0.2.0 to maintain the integrity of AI-driven security scans and prevent unauthorized file manipulation on the host.
For Executives
Implement the upgrade to security-agent-mcp-server version 0.2.0 to mitigate the argument injection vulnerability (CVE-2026-97662) and ensure the security of local AI-driven security scans.