Trending:
OpenAI admin controls GitHub Issues agent approvals Gemini in Chrome UK expansion Developer tools coverage
TECHSTAGED Better software. Smarter business.

What the AWS bulletin confirms about CVE-2026-87912 and CVE-2026-87913 in AWS Security Agent

By TechStaged

· 1 min read

Prepared with AI assistance from source material. Automated editorial review recorded . Automated checks can miss errors and do not represent human approval. Editorial policy and corrections.

Illustration of AWS Security Agent and S3 bucket ownership verification
TechStaged-owned

Summary

  • CVE-2026-87912 and CVE-2026-87913 involve missing S3 bucket ownership verification in the AWS Security Agent plugin and MCP server.
  • The bulletin indicates remediation by upgrading to version 0.2.0 for the affected components (agent-toolkit-for-aws and awslabs.security-agent-mcp-server).
  • The bulletin recommends verifying ownership of the scan-input bucket security-agent-scans-<account-id>-<region> in your account and pre-creating the bucket as precaution.

The AWS security bulletin identifies two CVEs in the AWS Security Agent ecosystem: CVE-2026-87912 and CVE-2026-87913, both tied to missing S3 bucket ownership verification.

These issues are addressed in version 0.2.0 of agent-toolkit-for-aws and awslabs.security-agent-mcp-server, with a recommendation to upgrade to the latest version.

WHAT READERS CAN DECIDE OR DO NEXT

Upgrade to the specified versions to mitigate the vulnerability (agent-toolkit-for-aws and awslabs.security-agent-mcp-server) as indicated by the bulletin.

Verify that the scan-input bucket security-agent-scans-<account-id>-<region> in your account is owned by your own account, and consider pre-creating it to prevent third-party registration.

SOURCES

Security CVE-2026-115845 in AWS MCP Server: what the bulletin confirms and what it means for users • 2 min read Security Two critical PHP runtime CVEs (CVE-2026-109618 and CVE-2026-109619) prompt patching and migration guidance, per AWS bulletin • 2 min read Security CVE-2026-110812 in Amazon Neptune: what operators should know and how to respond • 2 min read Security Two CVEs in FreeRTOS-Kernel Arm Cortex-R82 MPU port: remediation guidance and reader takeaways • 2 min read Security Explainer: What the AWS CVE-2026-85787 bulletin means for AWS MCP Server users • 2 min read Security LiteLLM 1.107.0 supply chain: what the verified evidence says about credential theft via Python startup hooks • 1 min read Developer Tools GA for Enterprise GitHub Apps: What the Evidence Shows Beyond the Announcement • 3 min read Developer Tools Copilot usage metrics expand to OpenCode and more, enabling cross-tool visibility • 3 min read