CVE-2026-116635 – Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

Bulletin ID: 2026-164-AWS
Publication Date: 11/02/2026 13:30 PM PST

Description:

We identified CVE-2026-116635. Under certain conditions, improper limitation of a pathname to a restricted directory in the deployment status component of the MCP server might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status directory. Where write access has been enabled, to create or overwrite JSON files outside that directory.

Impacted versions: < v0.2.1 of awslabs.aws-serverless-mcp-server

Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

Read this article

Read the original article:

CVE-2026-116635 – Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server