Exploit / PoChigh
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-54136 | Trusted MCP Config Swap Enables RCE in Cursor AI Code Editor ≤1.2.4 | 8.8 | 27% | ||
| CVE-2025-59536 | Code Injection in Anthropic Claude Code Startup Trust Dialog (pre-1.0.111) | 8.7 | 26% | ||
| CVE-2026-12957 | Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all supported platforms may allow a for arbitrary code execution | 8.5 | <1% | ||
| CVE-2026-12958 | Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary | 8.5 | <1% | ||
| CVE-2026-30615 | A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands on a victim system | 8.0 | <1% |
From the original article
3 min read at thehackernews.com
Swati Khandelwal Jun 26, 2026 AI Security / Vulnerability A high-severity flaw in Amazon Q Developer let a malicious repository run commands and steal a developer's cloud credentials. The path was short: a developer opens the repo, trusts the workspace, and Amazon Q does the rest. Amazon has patched it.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.