A code injection vulnerability in baryhuang/mcp-server-aws-resources-python 0.1.0 allows remote attackers to execute arbitrary Python code via the execute_query method. This occurs due to insufficient input validation and exposure of dangerous Python built-ins in the execution namespace, enabling attackers to steal AWS credentials and access sensitive environment data.