AWS Serverless MCP Server Path Traversal Vulnerability – Update Required
AWS Serverless MCP Server versions below v0.2.1 have a path traversal flaw (CVE-2026-116635) in the deployment status component. An attacker who can influence the MCP agent could read or modify JSON files outside the intended directory. If you're running this tool, update immediately to v0.2.1 or later.
source: [aws/security-bulletin]