The AWS Transform MCP Server (awslabs.aws-transform-mcp-server) is an open-source Model Context Protocol server that runs locally on developers' machines. Versions >=0.1.0 and <0.1.5 contain a path traversal vulnerability (CWE-22) in the get_resource tool, where improper limitation of the pathname via the savePath parameter may allow an attacker to write files outside the intended directory. This can lead to local code execution. The vulnerability has a CVSS 3.1 score of 8.6 (high severity) with attack vector local, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. AWS manages remediation for this cloud-hosted service and has published an official security bulletin with patch information.

Successful exploitation allows a local attacker with user interaction to write arbitrary files outside the intended directory, potentially leading to local code execution. The vulnerability impacts confidentiality, integrity, and availability of the affected system. The CVSS score of 8.6 reflects a high severity risk.

A patch is available for this vulnerability. Users should upgrade aws-transform-mcp-server to version 0.1.5 or later to remediate the issue. Since this is a cloud service component running locally, AWS manages remediation guidance via their security bulletin at https://aws.amazon.com/security/security-bulletins/2026-075-aws/. Users should follow the vendor's official instructions for patching.