// AWSMEDIUM
CVE-2026-116635 is a medium-severity (CVSS 6.1) path traversal vulnerability in AWS Serverless MCP Server before v0.2.1. The flaw in the deployment status component allows an attacker who can influence the MCP agent to read JSON files outside the intended directory or, with write access, create or overwrite files outside that directory using directory traversal sequences or absolute paths. No public exploit is currently known.
// Get alerts for AWS