CVE-2026-115845: Incomplete validation in the run_script Python sandbox in AWS MCP Server
Published Oct 23, 2026
·Updated
An incomplete list of disallowed inputs in the Python code validator of the runscript tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script.
AWS fixed this issue service-side. No customer action is required.
Affected Software
1 affected component
AWS MCP Server
Event History
Oct 23, 2026
CVE Published
via MITRE·07:04 PM
Data Sourced
via MITRE·07:04 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who could exploit this issue?
An authenticated remote user could exploit it by submitting a crafted script to the run_script tool. The resulting arbitrary code execution is limited to that user's own isolated session environment.
2
Is customer remediation required?
No. AWS fixed the issue service-side, and no customer action is required.