Threats tagged 'ghsa-fgmx-xfp3-w28p'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 1.9%	CVE-2026-5059 · aws-mcp has a Command Injection Remote Code Execution Vulnerability Critical9.8EPSS 1.9%2026-04-11GCVE Database A critical remote code execution vulnerability (CVE-2026-5059) exists in aws-mcp-server versions up to 1.7.0. The flaw is due to improper validation of user-supplied input in the allowed commands list, allowing unauthenticated attackers to execute arbitrary system commands on the server. EPSS 1.9%Vulnerability CWE-78 #ghsa-fgmx-xfp3-w28p #pypi	GCVE Database	2026-04-11

Page 1 of 1