Threats affecting pkg:github/awslabs/documentdb-mcp-server

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.5	EPSS 0.2%	CVE-2026-18954AWS documentdb-mcp-server · Incorrect Authorization Medium5.5EPSS 0.2%2026-08-05CVE Database V5CVE-2026-18954 CVE-2026-18954 is an incorrect authorization vulnerability in the aggregation pipeline tool of Amazon AWS Labs DocumentDB MCP Server versions before 1.0.12. This flaw allows an authenticated MCP client to perform unauthorized write operations on the connected database by bypassing the read-only mode enforcement. The issue is fixed in version 1.0.12 and later. EPSS 0.2%Vulnerability CWE-863	CVE Database V5	2026-08-05

Page 1 of 1