Documentdb Mcp Server
Approved changes feed: RSS · Atom
cpe:2.3:a:aws:documentdb-mcp-server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Aws (e6707f00-6abb-51df-808c-9e3417305027) |
|---|---|
| Product | Documentdb Mcp Server (a9cb3f2c-8405-527f-852d-cc79bf049cdc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-18954 |
vulnerable | 2026-09-16 04:34:02.015255 |
Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server
MEDIUM (5.5)
Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate write operations on the connected database via write-capable aggregation pipeline stages that bypass the read-only mode enforcement logic.
To remediate this issue, users should upgrade to version 1.0.12 or later.
Published: 2026-08-05T20:07:35.451Z
Updated: 2026-08-06T13:33:02.167Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.