// security
$ tail -f ./security
Headlines from early disclosure channels, research labs and curated news, each with a short summary.
# Today
-
CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server
CVE-2026-115845 concerns incomplete validation in the Python sandbox used by AWS MCP Server's run_script tool.
-
CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server
An open-source Multi Model Server has CVE-2026-115812 and CVE-2026-115813 affecting model archive extraction; the AWS inference tool is end-of-life.
-
CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server
CVE-2026-87912 and CVE-2026-87913 identify missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server.
-
CVE-2026-87911
A security bulletin describes CVE-2026-87911, an AWS-related vulnerability report.
-
CVE-2026-85788 - Issue with awslabs mysql-mcp-server
A CVE reports an issue in awslabs mysql-mcp-server, a tool for connecting MySQL databases with Model Context Protocol clients.
-
CVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards
A stored cross-site scripting issue in OpenSearch Dashboards involves a bypass of a Vega expression function.
-
CVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope
CVE-2026-85787 affects Amazon's PostgreSQL MCP server, allowing disallowed SQL inputs to modify data beyond read-only limits.
# Yesterday
-
CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt
CVE-2026-115417 is a memory allocation flaw in the MQTT 3.1.1 compatibility adapter of aws-c-mqtt, affecting AWS Common Runtime and IoT SDK components.
-
CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
CVE-2026-115419 is an issue in the Strands Agents SDK A2A server where conversation state was not isolated between authenticated callers, allowing data to be disclosed to the wrong session.
-
CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook
CVE-2026-115414 describes an OS command injection issue in AWS SAM CLI's Terraform hook, where resource addresses are interpolated into generated Makefile recipes.
-
CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing
CVE-2026-115416 affects Amazon Athena engine version 3, where incorrect authorization checks could allow authenticated users to read account identifiers and SQL metadata.
-
PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, can allow unauthenticated remote code execution or denial of service on affected workers.
-
CVE-2026-112408 - Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
CVE-2026-112408 affects SageMaker Python SDK default_bucket(), which uses predictable S3 bucket names without ownership checks, enabling first-creation by another account.