Trending:
OpenAI admin controls GitHub Issues agent approvals Gemini in Chrome UK expansion Developer tools coverage
TECHSTAGED Better software. Smarter business.

CVE-2026-115845 in AWS MCP Server: what the bulletin confirms and what it means for users

By TechStaged

· 2 min read

Prepared with AI assistance from source material. Automated editorial review recorded . Automated checks can miss errors and do not represent human approval. Editorial policy and corrections.

Illustration of AWS MCP Server security bulletin highlighting CVE-2026-115845
TechStaged-owned

Summary

  • Bulletin ID: 2026-149; AWS MCP Server provides a run_script tool that runs Python scripts in a sandboxed environment.
  • CVE-2026-115845 is described as an issue in the Python code validator of the run_script tool in AWS MCP Server.
  • An incomplete list of disallowed inputs might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script.
  • Impacted versions: N/A (managed service, exclusively hosted); This issue has been addressed service-side.

The security bulletin identifies CVE-2026-115845 as an issue in the Python code validator of the run_script tool within AWS MCP Server. AWS MCP Server is described as a managed service that gives AI agents access to AWS through the Model Context Protocol (MCP), including a run_script tool that runs Python scripts in a sandboxed environment.

The bulletin notes the issue concerns input validation prior to the execution of Python scripts.

WHAT THIS MEANS FOR USERS OF AWS MCP SERVER

An incomplete list of disallowed inputs might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script.

Impacted versions: N/A (managed service, exclusively hosted). The bulletin states the issue has been addressed service-side and no customer action is required.

If your usage is limited to Python scripts that merely issue AWS API calls, no workaround is required according to the bulletin.

REMEDIATION STATUS AND GUIDANCE FOR READERS

This issue has been addressed service-side, and there is no recommended customer action. The bulletin explicitly states: No customer action is required.

Because MCP Server is a managed service, remediation details are not publicly disclosed beyond the noted mitigation and status.

LIMITATIONS AND WHAT REMAINS UNCERTAIN

The available public evidence comes from a single security bulletin excerpt provided in the research package. The bulletin does not disclose technical remediation details or broader impact scope beyond the run_script validator issue within the MCP Server sandbox.

SOURCES

Security CVE-2026-110812 in Amazon Neptune: what operators should know and how to respond • 2 min read Security Two critical PHP runtime CVEs (CVE-2026-109618 and CVE-2026-109619) prompt patching and migration guidance, per AWS bulletin • 2 min read Security Two CVEs in FreeRTOS-Kernel Arm Cortex-R82 MPU port: remediation guidance and reader takeaways • 2 min read Security Agents are your newest insiders: Security must move at their speed • 2 min read Security LiteLLM 1.107.0 supply chain: what the verified evidence says about credential theft via Python startup hooks • 1 min read Developer Tools GA for Enterprise GitHub Apps: What the Evidence Shows Beyond the Announcement • 3 min read Developer Tools Copilot usage metrics expand to OpenCode and more, enabling cross-tool visibility • 3 min read Developer Tools JetBrains GameDev Day 2026 Recordings: Cross-Engine AI Workflows and IDE-Integrated Debugging Emerge from the Evidence • 3 min read