Amazon Mq Mcp Server
Monthly
Credential exfiltration in Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) before version 2.0.24 allows a remote unauthenticated attacker - operating through prompt injection - to redirect RabbitMQ broker credentials or OAuth access tokens to an attacker-controlled endpoint by supplying a crafted broker hostname in the MCP client context. The RabbitMQ broker connection tools fail to validate that hostnames resolved through the MCP client context correspond to legitimate Amazon MQ broker endpoints, enabling a server-side request forgery-like exfiltration primitive. No public exploit code has been identified at time of analysis, no CISA KEV listing exists, and the vendor (Amazon) has released a confirmed fix in version 2.0.24.
Credential exfiltration in Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) before version 2.0.24 allows a remote unauthenticated attacker - operating through prompt injection - to redirect RabbitMQ broker credentials or OAuth access tokens to an attacker-controlled endpoint by supplying a crafted broker hostname in the MCP client context. The RabbitMQ broker connection tools fail to validate that hostnames resolved through the MCP client context correspond to legitimate Amazon MQ broker endpoints, enabling a server-side request forgery-like exfiltration primitive. No public exploit code has been identified at time of analysis, no CISA KEV listing exists, and the vendor (Amazon) has released a confirmed fix in version 2.0.24.