Skip to main content

Documentdb Mcp Server

1 CVEs product

Monthly

CVE-2026-18954 Aug 05, 20:17 MEDIUM PATCH This Month

Write operation bypass in the AWS Labs DocumentDB MCP Server before version 1.0.12 allows an authenticated MCP client to execute unauthorized database writes while the server operates in read-only mode. The aggregation pipeline tool failed to block write-capable stages - specifically $out and $merge - enabling low-privilege MCP clients to modify DocumentDB data in direct violation of the configured read-only policy. No public exploit code has been identified and the vulnerability is not listed in CISA KEV; a vendor-confirmed fix is available in release 2026.04.20260408085348.

Authentication Bypass Amazon Documentdb Mcp Server
NVD GitHub
CVSS 4.0
5.7
EPSS
0.1%
EPSS 0% CVSS 5.7
MEDIUM PATCH This Month

Write operation bypass in the AWS Labs DocumentDB MCP Server before version 1.0.12 allows an authenticated MCP client to execute unauthorized database writes while the server operates in read-only mode. The aggregation pipeline tool failed to block write-capable stages - specifically $out and $merge - enabling low-privilege MCP clients to modify DocumentDB data in direct violation of the configured read-only policy. No public exploit code has been identified and the vulnerability is not listed in CISA KEV; a vendor-confirmed fix is available in release 2026.04.20260408085348.

Authentication Bypass Amazon Documentdb Mcp Server
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy