CVE-2026-85654: CWE-1336 Improper neutralization of special elements used in a template engine in Amazon awslabs.dynamodb-mcp-server

This vulnerability (CVE-2026-85654) arises from improper neutralization of special elements used in the template engine within the CDK generator of Amazon's awslabs.dynamodb-mcp-server. Specifically, before version 2.1.6, an attacker with contextual access could craft malicious table, index, or attribute names in a data model file that, when processed, might lead to arbitrary code execution on the host deploying the generated application. The vulnerability is classified under CWE-1336. The CVSS 4.0 score is 7.1 (high), reflecting local attack vector, low complexity, partial attack type, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. AWS provides a vendor advisory and manages remediation for this cloud service.

Successful exploitation could allow an attacker with context-dependent access to execute arbitrary code on the host system that deploys the generated application. This could compromise confidentiality, integrity, and availability of the affected environment. However, exploitation requires local access and user interaction, limiting remote or automated exploitation potential. No active exploits are known in the wild at this time.

AWS manages remediation for this cloud-hosted service. A patch is available in version 2.1.6 and later. Users should upgrade to version 2.1.6 or later to mitigate this vulnerability. Refer to the official AWS security bulletin at https://aws.amazon.com/security/security-bulletins/2026-097-aws/ for detailed guidance and confirmation of patch status.