Security Agent Mcp Server
Monthly
Arbitrary file creation, overwrite, and truncation outside the intended workspace is possible on hosts running AWS security-agent-mcp-server before version 0.2.0, because the diff scan operation injects an attacker-controlled 'reference' value as extra command arguments. The flaw is local (AV:L) and requires the operator or AI agent to run the diff scan against attacker-influenced input (UI:R), but no authentication is needed once that operation is invoked (PR:N) and the impact crosses a security boundary (S:C), yielding high integrity and availability impact with no confidentiality loss (CVSS 8.2, High). No public exploit code or confirmed active exploitation was identified at time of analysis; the vendor-released fix is version 0.2.0.
Arbitrary file creation, overwrite, and truncation outside the intended workspace is possible on hosts running AWS security-agent-mcp-server before version 0.2.0, because the diff scan operation injects an attacker-controlled 'reference' value as extra command arguments. The flaw is local (AV:L) and requires the operator or AI agent to run the diff scan against attacker-influenced input (UI:R), but no authentication is needed once that operation is invoked (PR:N) and the impact crosses a security boundary (S:C), yielding high integrity and availability impact with no confidentiality loss (CVSS 8.2, High). No public exploit code or confirmed active exploitation was identified at time of analysis; the vendor-released fix is version 0.2.0.