MCP Server Path Traversal: CVE-2026-116635 in AWS Serverless MCP
The AWS Serverless MCP Server calls itself read-only by default, and the configuration block its README tells you to paste into Cursor, Kiro or VS Code launches it with --allow-write and --allow-sensi
Responses
Markdown supported · ⌘↵ to post
No responses yet.