Vulnerability Bulletins |
CVE-2025-5277 |
|
| Affected software | AWS |
| aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-5277 | |