{"schema":"threatline.record/2","record":{"id":"CVE-2026-5059","aliases":["GHSA-fgmx-xfp3-w28p","PYSEC-2026-288"],"summary":"aws-mcp has a Command Injection Remote Code Execution Vulnerability","details":"aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the allowed commands list. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the MCP server. Was ZDI-CAN-27969.","categories":["Containers & cloud"],"product":"aws-mcp","vendor":"aws-mcp-server","ecosystem":"pip","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fgmx-xfp3-w28p","source_modified_at":"2026-10-27T15:22:51Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"ecosystem":"pip","name":"aws-mcp"},"range":"<= 1.7.0"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-5059","source_modified_at":"2026-04-13T17:30:38.053Z","fetched_at":"2026-10-27T16:27:21.584480Z","product":"aws-mcp-server","vendor":"aws-mcp-server","versions":[{"version":"1.3.0","status":"affected"}],"defaultStatus":"unknown"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fgmx-xfp3-w28p","source_modified_at":"2026-10-27T15:30:05.495099034Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"aws-mcp","ecosystem":"PyPI","purl":"pkg:pypi/aws-mcp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.7.0"}]}],"versions":["1.5.4","1.5.5","1.5.6","1.6.0","1.7.0"]}],"fixed_versions":[],"cvss":9.8,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.01908,"percentile":0.79653,"score_date":"2026-10-27"},"published_at":"2026-04-11T00:15:02.920Z","modified_at":"2026-10-27T15:30:05.495099034Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-fgmx-xfp3-w28p","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27T15:22:51Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-5059","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-04-13T17:30:38.053Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-fgmx-xfp3-w28p","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27T15:30:05.495099034Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-5059","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5059","source":"GitHub Advisory Database"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-245","source":"GitHub Advisory Database"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/aws-mcp/PYSEC-2026-288.yaml","source":"GitHub Advisory Database"},{"url":"https://pypi.org/project/aws-mcp","source":"GitHub Advisory Database"},{"url":"https://github.com/advisories/GHSA-fgmx-xfp3-w28p","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://www.zerodayinitiative.com/advisories/ZDI-26-245/","tags":["x_research-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"total","assessed_at":"2026-04-13T17:27:51.909223Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-27T15:30:05.495099034Z","content_hash":"2e8857aa373a376ee6933998710a54062a8b425c102cf102609c20b7db68a8a5"}}