CVE-2026-87912

Vendor

Amazon Web Services, Anthropic

Product

Claude, AI / LLM tooling

CVSS

5.9

Exposure class

AI infrastructure

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   AWS bulletin AWS 7d ago

   CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server

   CVE-2026-87912CVE-2026-87913 Amazon Web Services Anthropic
2. 8
   CVE NVD 10 Sep 2026

   A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote…

   A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including…

   CVSS 5.9 Fix available CVE-2026-87912