Aws Transform Mcp Server
Monthly
Path traversal in Amazon's awslabs.aws-transform-mcp-server MCP package (versions 0.1.0-0.1.4) enables a context-dependent actor - which may include a malicious MCP resource, prompt-injected content, or local attacker - to write arbitrary files outside the server's intended working directory by supplying traversal sequences in the savePath parameter of the get_resource tool. The vulnerability carries a CVSS 8.6 (High) score with scope change, meaning exploitation can impact the broader local filesystem beyond the MCP server process itself. No public exploit code or CISA KEV listing has been identified at time of analysis, but a vendor-released patch (version 0.1.5) is available via PyPI and covered under AWS Security Bulletin 2026-075.
Path traversal in Amazon's awslabs.aws-transform-mcp-server MCP package (versions 0.1.0-0.1.4) enables a context-dependent actor - which may include a malicious MCP resource, prompt-injected content, or local attacker - to write arbitrary files outside the server's intended working directory by supplying traversal sequences in the savePath parameter of the get_resource tool. The vulnerability carries a CVSS 8.6 (High) score with scope change, meaning exploitation can impact the broader local filesystem beyond the MCP server process itself. No public exploit code or CISA KEV listing has been identified at time of analysis, but a vendor-released patch (version 0.1.5) is available via PyPI and covered under AWS Security Bulletin 2026-075.