https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:04:35.627964+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-4270 CVE-2026-4270 — AWS API MCP File Access Restriction Bypass 2026-10-03T18:04:35.630245+00:00

Affected: AWS API MCP Server

Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may allow the bypass of intended file access restriction and expose arbitrary local file contents in the MCP client application context.

To remediate this issue, users should upgrade to version 1.3.9.

 https://cve.radiocsirt.org/vuln/pysec-2026-162 PYSEC-2026-162 2026-10-03T18:04:35.630344+00:00

Affected: PyPI: awslabs-aws-api-mcp-server

Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may allow the bypass of intended file access restriction and expose arbitrary local file contents in the MCP client application context.

To remediate this issue, users should upgrade to version 1.3.9.