CVE-2026-18954: CWE-863: Incorrect Authorization in AWS documentdb-mcp-server
An authorization flaw in the aggregation pipeline tool of Amazon AWS Labs DocumentDB MCP Server versions before 1.0.12 allows an authenticated MCP client to perform unauthorized write operations. This occurs because write-capable aggregation pipeline stages bypass the intended read-only mode enforcement. The issue is addressed by upgrading to version 1.0.12 or later.
AI Analysis
Technical Summary
CVE-2026-18954 describes an incorrect authorization vulnerability in the aggregation pipeline tool of Amazon AWS Labs DocumentDB MCP Server prior to version 1.0.12. Authenticated MCP clients could exploit this flaw to perform unauthorized write operations on the connected database by leveraging write-capable aggregation pipeline stages that circumvent the read-only mode enforcement logic. This vulnerability is classified under CWE-863 (Incorrect Authorization).
Potential Impact
The vulnerability allows an authenticated MCP client to perform inappropriate write operations on the database, potentially leading to unauthorized data modification. There is no impact on confidentiality or availability reported. The CVSS v3.1 base score is 5.5 (medium severity), reflecting limited attack vector (local), low complexity, and no user interaction required.
Mitigation Recommendations
Users should upgrade to Amazon AWS Labs DocumentDB MCP Server version 1.0.12 or later to remediate this issue. No other mitigations are indicated.
CVE-2026-18954: CWE-863: Incorrect Authorization in AWS documentdb-mcp-server
Description
An authorization flaw in the aggregation pipeline tool of Amazon AWS Labs DocumentDB MCP Server versions before 1.0.12 allows an authenticated MCP client to perform unauthorized write operations. This occurs because write-capable aggregation pipeline stages bypass the intended read-only mode enforcement. The issue is addressed by upgrading to version 1.0.12 or later.
CVSS v3.1
Score 5.5medium
Affected software
pkg:github/awslabs/mcp/documentdb-mcp-serverRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-18954 describes an incorrect authorization vulnerability in the aggregation pipeline tool of Amazon AWS Labs DocumentDB MCP Server prior to version 1.0.12. Authenticated MCP clients could exploit this flaw to perform unauthorized write operations on the connected database by leveraging write-capable aggregation pipeline stages that circumvent the read-only mode enforcement logic. This vulnerability is classified under CWE-863 (Incorrect Authorization).
Potential Impact
The vulnerability allows an authenticated MCP client to perform inappropriate write operations on the database, potentially leading to unauthorized data modification. There is no impact on confidentiality or availability reported. The CVSS v3.1 base score is 5.5 (medium severity), reflecting limited attack vector (local), low complexity, and no user interaction required.
Mitigation Recommendations
Users should upgrade to Amazon AWS Labs DocumentDB MCP Server version 1.0.12 or later to remediate this issue. No other mitigations are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-w95p-h69m-853r
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-18954"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
- Is Cloud Service
- true
Threat ID: 6a74cf83bf8831d5391acfb2
Added to database: 08/06/2026, 18:16:35 UTC
Last enriched: 08/06/2026, 18:27:22 UTC
Last updated: 08/07/2026, 03:40:59 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.