CVE-2026-97662: Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace
An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to the diff scan operation.
To remediate this issue, users should upgrade to version 0.2.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
AWS security-agent-mcp-serverto a version that resolves this vulnerability.Fixed in 0.2.0
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack requires the ability to supply a crafted reference value to the diff scan operation. The CVSS vector indicates no privileges are required, but user interaction is required.
Which deployments are affected?
AWS security-agent-mcp-server versions before 0.2.0 are affected. The issue can write outside the intended workspace directory, so host systems running a vulnerable version are exposed when untrusted reference values can reach diff scan operations.
What is the recommended remediation?
Upgrade AWS security-agent-mcp-server to version 0.2.0. This is the remediation specified for the vulnerability.
What could successful exploitation allow?
A successful attack may create, overwrite, or truncate arbitrary files on the host outside the intended workspace. The impact depends on the permissions of the process running the server and the files it can access.