Cyber Alert: AWS DynamoDB MCP Server CVE-2026-85654 Can Turn Data Models Into Host Code Execution
CVE: CVE-2026-85654
Severity: High, CVSS 4.0 7.1
Affected: awslabs.dynamodb-mcp-server 2.0.10 through 2.1.5
Fixed: 2.1.6
Published: September 4, 2026
Exploitation: No confirmed in-the-wild exploitatio
404-founders.com4 min read