What is the CVSS score of CVE-2025-63604?

CVE-2025-63604 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.1%.

Which versions of Python are affected by CVE-2025-63604?

CVE-2025-63604 presents notable security risk, a command injection vulnerability rated CVSS 6.5. Exploitation could allow attackers to execute code or inject malicious input.

Is there a public PoC exploit available for CVE-2025-63604?

Yes, a public proof-of-concept exploit is available for CVE-2025-63604. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-63604?

Within 7 days: Identify affected systems running baryhuang/mcp-server-aws-resources-python 0.1.0 that allows and apply vendor patches promptly. Validate input sanitization for user-controlled parameters.

Python CVE-2025-63604

MEDIUM

Command Injection (CWE-77)

2025-11-18 cve@mitre.org

Authentication Bypass RCE Python Command Injection Aws Resources Mcp Server

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:22 vuln.today

PoC Detected

Dec 31, 2025 - 02:23 vuln.today

Public exploit code

CVE Published

Nov 18, 2025 - 16:15 nvd

MEDIUM 6.5

DescriptionCVE.org

A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the execute_query method. The vulnerability stems from the exposure of dangerous Python built-in functions (__import__, getattr, hasattr) in the execution namespace and the direct use of exec() to execute user-supplied code. An attacker can craft malicious queries to execute arbitrary Python code, leading to AWS credential theft (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY), file system access, environment variable disclosure, and potential system compromise. The vulnerability allows attackers to bypass intended security controls and gain unauthorized access to sensitive AWS resources and credentials stored in the server's environment.

AnalysisAI

A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the execute_query method. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Command Injection (CWE-77), which allows attackers to inject arbitrary commands into system command execution. A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the execute_query method. The vulnerability stems from the exposure of dangerous Python built-in functions (__import__, getattr, hasattr) in the execution namespace and the direct use of exec() to execute user-supplied code. An attacker can craft malicious queries to execute arbitrary Python code, leading to AWS credential theft (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY), file system access, environment variable disclosure, and potential system compromise. The vulnerability allows attackers to bypass intended security controls and gain unauthorized access to sensitive AWS resources and credentials stored in the server's environment. Affected products include: Baryhuang Aws Resources Mcp Server.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized APIs, avoid shell execution, validate input with strict allowlists.