CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
AI SECURITYCVE-2026-116635redteam/daily · 1 source
- Severity
- Medium
- Highest CVSS
- 6.9
- Exploited
- Not known
- Sources
- 1
What happened
Writing the summary… Our AI is reading all the sources now; it appears here in a few seconds.
From 1 source · Wrong?
What to do
- No action needed: this one is for your information.
General advice for this kind of story
Vulnerabilities
Full story timeline · 2 updates
Who reported · 1 outlet
AWS Security Bulletins