Aws Healthomics Mcp Server
Monthly
Directory traversal in AWS HealthOmics MCP Server (aws-healthomics-mcp-server) before version 0.0.36 allows an actor who can influence the MCP agent to write attacker-controlled content to arbitrary filesystem locations outside the intended workflow bundle directory via crafted workflow_files input. All pre-0.0.36 versions are affected, with the integrity-only impact (high) and no confidentiality or availability exposure confirmed by the CVSS 4.0 vector. No public exploit code exists and the vulnerability is absent from the CISA KEV catalog; Amazon has released a vendor-confirmed patch in version 0.0.36.
Directory traversal in AWS HealthOmics MCP Server (aws-healthomics-mcp-server) before version 0.0.36 allows an actor who can influence the MCP agent to write attacker-controlled content to arbitrary filesystem locations outside the intended workflow bundle directory via crafted workflow_files input. All pre-0.0.36 versions are affected, with the integrity-only impact (high) and no confidentiality or availability exposure confirmed by the CVSS 4.0 vector. No public exploit code exists and the vulnerability is absent from the CISA KEV catalog; Amazon has released a vendor-confirmed patch in version 0.0.36.