The Hacker NewsJun 26, 2026highAmazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs3 min readcve-2025-54136cve-2025-595361