https://vulnerability.circl.lu/sightings/feed 2026-07-27T17:50:44.371596+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0520d8f0-5b78-466e-a309-380c3fb9f6d3/export 2026-07-27T17:50:44.383660+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0520d8f0-5b78-466e-a309-380c3fb9f6d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16584", "type": "seen", "source": "https://gist.github.com/alon710/88746e1a08ea6a0846d93f6c2420614d", "content": "# CVE-2026-16584: CVE-2026-16584: Security Policy Bypass in AWS API MCP Server via Startup Initialization Failure\n\n> **CVSS Score:** 7.0\n> **Published:** 2026-07-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-16584\n\n## Summary\nA security policy bypass vulnerability exists in the AWS API MCP Server (awslabs-aws-api-mcp-server) from version 0.2.13 through 1.3.46. When the server fails to load the read-only operations index during startup (due to transient network failures, file permission issues, or other exceptions), it logs a warning but continues running in an insecure, degraded state. Under this condition, the security policy engine fails open, silently skipping all subsequent security checks and consent prompts for the lifetime of the process. This permits unauthorized mutating AWS CLI commands to execute via indirect prompt injection attacks.\n\n## TL;DR\nThe AWS API MCP Server fails open if the read-only operations index fails to load at startup, bypassing configured security policies and enabling unauthorized AWS command execution.\n\n## Technical Details\n\n- **CWE ID**: CWE-455 (Non-exit on Failed Initialization)\n- **Attack Vector**: Local (AV:L)\n- **CVSS v3.1 Score**: 7.0 (High)\n- **CVSS v4.0 Score**: 7.3 (High)\n- **EPSS Score**: 0.00130 (Percentile: 3.02%)\n- **Exploit Status**: None (No public weaponized exploits)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- awslabs-aws-api-mcp-server\n- **awslabs-aws-api-mcp-server**: >= 0.2.13, < 1.3.47 (Fixed in: `1.3.47`)\n\n## Mitigation\n\n- Upgrade the package to version 1.3.47 or later\n- Enforce the AWS IAM principle of least privilege on the server's active credentials\n- Deploy process monitoring to terminate the server if initialization warnings are detected\n\n**Remediation Steps:**\n1. Identify all active deployments of awslabs-aws-api-mcp-server\n2. Execute pip install --upgrade 'awslabs-aws-api-mcp-server>=1.3.47' to apply the official patch\n3. Verify that the server successfully loads the operations index on startup\n4. Audit the associated AWS IAM role to ensure it only possesses necessary permissions\n\n## References\n\n- [GitHub Security Advisory GHSA-29w2-fq35-v728](https://github.com/awslabs/mcp/security/advisories/GHSA-29w2-fq35-v728)\n- [AWS Security Advisory Bulletin](https://aws.amazon.com/security/security-bulletins/2026-063-aws/)\n- [NVD Vulnerability Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-16584)\n- [CVE Record Authority](https://www.cve.org/CVERecord?id=CVE-2026-16584)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-16584) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-25T14:31:52.579459Z"} 2026-07-25T14:31:52.579459+00:00 https://vulnerability.circl.lu/sighting/40d08f74-3163-4c80-aa67-9edf5058bbc2/export 2026-07-27T17:50:44.384949+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "40d08f74-3163-4c80-aa67-9edf5058bbc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16584", "type": "seen", "source": "https://bsky.app/profile/rindrics.com/post/3mre5olrots2j", "content": "FYI @amazonwebservices.bsky.social \nThe title of the \u2018card view\u2019 entry for CVE-2026-16756 in the Security Bulletin has been incorrectly listed as that for CVE-2026-16584.\naws.amazon.com/security/sec...", "creation_timestamp": "2026-07-24T01:01:22.255042Z"} 2026-07-24T01:01:22.255042+00:00 https://vulnerability.circl.lu/sighting/2c4206c5-6a2d-4cf9-b364-d966ecdcf71b/export 2026-07-27T17:50:44.385040+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2c4206c5-6a2d-4cf9-b364-d966ecdcf71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16584", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116970375756122049", "content": "CVE-2026-16584 - Security bypass in AWS API MCP Server v0.2.13-1.3.46. Init failure skips user-configured policy checks, allowing unauthorized AWS API ops. CVSS 7.0. Update immediately. #CVE #AWS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-16584/", "creation_timestamp": "2026-07-23T17:04:50.812464Z"} 2026-07-23T17:04:50.812464+00:00 https://vulnerability.circl.lu/sighting/eb4d1758-84b7-4870-aa6c-211302ad8f16/export 2026-07-27T17:50:44.385109+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "eb4d1758-84b7-4870-aa6c-211302ad8f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16584", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrdd2js4g22v", "content": "CVE-2026-16584 - Security bypass in AWS API MCP Server v0.2.13-1.3.46. Init failure skips user-configured policy checks, allowing unauthorized AWS API ops. CVSS 7.0. Update immediately. #CVE #AWS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-16584/", "creation_timestamp": "2026-07-23T17:04:50.345799Z"} 2026-07-23T17:04:50.345799+00:00