Bartek Chojnacki

AWS Transform MCP Server versions 0.1.0 through 0.1.4 have a path traversal flaw (CVE-2026-18953) that lets attackers write files outside the intended directory via the savePath parameter, potentially enabling local code execution. If you're running this open-source MCP server locally, you need to upgrade to version 0.1.5 or later immediately. This is a context-dependent attack, but the risk is real for developers using AI assistants with AWS Transform integration.

AWS just dropped general availability for vector search in Amazon DynamoDB, and it's a game-changer for AI workloads. You can now index and search billions or trillions of vectors with single-digit millisecond latency at 99%+ recall—no infrastructure headaches, just serverless magic. Store embeddings alongside your data, create vector indexes, and unlock semantic search for RAG, recommendations, and AI agent memory retrieval. Available globally on DynamoDB with your choice of embedding models, including Amazon Bedrock.

AWS Lambda just leveled up with scalable network bandwidth reaching 3,000 Mbps for functions packing 10 GB of memory—a massive jump from the old 625 Mbps cap. This means your data-hungry workloads outside a VPC can now transfer terabytes faster, cutting execution times and costs while keeping latency happy. The bandwidth scales automatically with your function's memory, and it's free everywhere AWS operates. Just request it through AWS Service Quotas and you're golden.

Amazon Bedrock AgentCore's InvokeHarness API has a nasty input validation bug (CVE-2026-18830) that lets authenticated users trigger configured tools without the AI model checking them first. If your harness has tools set up, attackers could invoke them directly, skipping all those safety controls you've got in place. The good news? Impact is limited to whatever tools you've actually configured—empty harnesses are safe. You'll want to update immediately if you're running versions before July 31, 2026.

Kiro IDE (versions 1.0.0–1.0.212) and Kiro CLI (pre-2.10.0) on Windows have a nasty path traversal issue—CVE-2026-18656 and CVE-2026-18657. A malicious project directory can plant an executable that runs before your system PATH, letting attackers execute arbitrary code when you open the folder. **Action required**: Update immediately if you're on Windows.

Amazon just dropped Web Search on Bedrock, and it's a game-changer for keeping your data locked down. Instead of juggling third-party search APIs and compliance reviews, you can now ground GPT responses with current web knowledge using a single API parameter—all server-side within AWS. The tech leverages Amazon's massive web index and knowledge graph to deliver semantic snippets optimized for your model's context window, complete with citations. No vendor onboarding, no data egress, no headaches.

Strands Agents Tools versions below 0.8.0 have a critical vulnerability (CVE-2026-18733) where prompt injection can bypass the shell tool's consent gate. An attacker can craft prompts—like those hidden in untrusted content—to set the non_interactive parameter to true, letting arbitrary OS commands execute without operator approval. Update to version 0.8.0 or later immediately if you're running affected versions.

AWS CLI versions 1.45.27 and earlier (v1) or 2.35.2 and earlier (v2) have a nasty security gap: the EMR SSH helper commands (aws emr ssh, aws emr socks, aws emr put, aws emr get) skip host key verification. This opens the door for man-in-the-middle attacks to intercept your SSH sessions and file transfers. You need to update immediately to patch CVE-2026-18654.

AWS Amazon MQ MCP Server versions up to 2.0.23 have a nasty vulnerability (CVE-2026-18655) that lets attackers snag your broker credentials and OAuth tokens through prompt injection. The flaw affects RabbitMQ connection tools—basically, a crafted endpoint can trick the system into leaking sensitive auth data. You need to upgrade to version 2.0.24 or later immediately. This one's serious and requires immediate action.