AI AgentHigh

CVE-2025-5277: aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that on…

Occurred: May 28, 2025
Published: May 28, 2025
Source: NVD CVE

Summary

aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system.

Classification

Category confidence: 90%

Severity confidence: 85%

Rationale: MCP server vulnerability allows command injection via prompts, enabling arbitrary command execution on host systems.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source

Summary

Tags

Classification