Dashboard / CVE-2026-116635

CVE-2026-116635

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 39/100
Published: 2026-11-02 Modified: 2026-11-03 First seen: 2026-11-02 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Passive
S: X
AT: None
VC: High
VI: Low
VA: None

Description

Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server (aws-serverless-mcp-server) before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status directory. Where write access has been enabled, to create or overwrite JSON files outside that directory. This issue is reachable through directory traversal sequences or an absolute path supplied in the project name input. To remediate this issue, users should upgrade to version v0.2.1.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
AWS aws-serverless-mcp-server 0 < 0.2.1

References & Advisories (3)

Bug Bounty Relevance

39 / 100
✓ No authentication
✓ Low complexity

CVSS Score

6.9 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.31%
Raw Score 0.003130
Percentile 24.3%
Date 2026-11-05

EPSS Trend

2026-11-05
0.00313
2026-11-04
0.00313
2026-11-03
0.00313

Intelligence Sources

mitre ref →
nvd ref →

External Links