Skip to content

CVE record · 2 sources

CVE-2026-115845

CVSS 6.4

An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote…

Vendor: Anthropic
Product: Claude, AI / LLM tooling
CVSS: 6.4
Exposure class: AI infrastructure

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

AWS bulletin AWS 8d ago

CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

Bulletin ID: 2026-149-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/23/2026 12:00 PM PDT Description: AWS MCP Server is a managed server that gives AI agents access to AWS through the Model…

CVE-2026-115845 Amazon Web Services Anthropic
8

CVE NVD 8d ago

An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote…

An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a…

CVSS 6.4 CVE-2026-115845 Anthropic