CVE-2026-85654: Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server
Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute names in a data model file.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using the CDK generator in awslabs.dynamodb-mcp-server versions before 2.1.6 are affected when they generate and deploy an application from a data model file containing attacker-controlled table, index, or attribute names.
What does an attacker need to exploit this issue?
An attacker needs to cause a crafted data model file, or crafted table, index, or attribute names within one, to be used by the CDK generator. Exploitation results in code execution on the host that deploys the generated application.
What should teams do if they cannot update immediately?
Do not generate or deploy applications from untrusted data model files, and restrict who can modify table, index, and attribute names in those files. Treat generated output from untrusted models as potentially hostile and avoid deploying it on sensitive hosts.