Amazon Aws Api Mcp Server — known CVE vulnerabilities
Every CVE whose affected-product data names Amazon Aws Api Mcp Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2026-4270 — CVSS 5.5 (medium): Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9…