Approved changes feed: RSS · Atom

cpe:2.3:a:alexei-led:aws-mcp-server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAlexei Led (ee932a53-7b9b-53d2-9f0d-3ad2978e79a3)
ProductAws Mcp Server (c896e68d-e21b-5257-b08c-1b9291a16530)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5277 vulnerable 2026-06-08 07:35:24.574630 Details available
CRITICAL (9.6)
aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system.
Published: 2025-05-28T13:14:26.863Z
Updated: 2025-05-28T13:27:50.584Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.