Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the allowed commands list. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the MCP server. Was ZDI-CAN-27968.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-02 | 1 | Disclosure1 |
| 2026-04-03 | 1 | False Positive1 |
| 2026-04-11 | 2 | Disclosure1Patch1 |
| 2026-04-13 | 3 | Disclosure1Patch2 |
| 2026-04-19 | 1 | Disclosure1 |
| 2026-04-21 | 1 | Patch1 |
[ZDI-26-246|CVE-2026-5058] (0Day) aws-mcp-server Command Injection Remote Code Execution Vulnerability (CVSS 9.8; Credit: Alfredo Oliveira and David Fiser of Trend Research) https://www.zerodayinitiative.com/advisories/ZDI-26-246/
Post summary
The zero‑day advisory announces CVE-2026-5058, a command injection RCE flaw in aws-mcp-server with a CVSS of 9.8, and directs readers to a link for further details.
AWS-MCP-Server (CVE-2026-5058) command injection is a critical reminder. MCP servers are privileged execution environments. Static scans miss runtime context. Production agents need execution-time authorization to block RCE. 🛡️ #MCPSecurity #AISecurity #MCP
Post summary
The post highlights a command‑injection flaw in AWS‑MCP‑Server (CVE‑2026‑5058) and stresses that static scans miss runtime context, advising the use of execution‑time authorization to mitigate RCE risk.
🚨 CVE-2026-5058: aws-mcp-server Command Injection ... Unauthenticated RCE in AWS MCP server via command injection - CVSS 9.8 means instant shells for anyone who finds this in... https://zerodaysignal.com/vulnerability/CVE-2026-5058 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet announces a critical command injection vulnerability in AWS MCP Server (CVSS 9.8), highlighting unauthenticated remote code execution without providing PoC or exploit code.
CVE-2026-5058: Critical command injection in aws-mcp-server. Remote code execution possible. Patch immediately and review security protocols to safeguard your systems. #AWS #CyberSecurity
Post summary
The post alerts to a critical command injection flaw in aws-mcp-server and urges immediate application of an available patch.
『The vendor rejected the vulnerability』 CVE-2026-5058 (0Day) aws-mcp-server Command Injection Remote Code Execution Vulnerability https://www.zerodayinitiative.com/advisories/ZDI-26-246/ CVE-2026-5059 (0Day) aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability https://www.zerodayinitiative.com/advisories/ZDI-26-245/
Post summary
The vendor has denied the validity of the reported vulnerabilities, with no proof‑of‑concept, exploit, or patch details provided in the text.
CVE-2026-5058 aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of … https://www.cve.org/CVERecord?id=CVE-2026-5058
Post summary
CVE‑2026‑5058 describes a command‑injection flaw in aws‑mcp‑server that allows attackers to run arbitrary code on affected installations. The brief note provides a direct link to the CVE record but no proof of exploitation or mitigation steps.
🚨 CRITICAL: CVE-2026-5058 - aws-mcp-server RCE (CVSS 9.8) Unauthenticated command injection allows remote code execution. Flaw in allowed commands list validation enables attackers to execute arbitrary code. Patch immediately. #CVE #PatchNow https://t.co/23tyctdpZR
Post summary
CVE-2026-5058 is a critical RCE vulnerability in aws-mcp-server that allows unauthenticated command injection; the tweet urges immediate patching.
CVE-2026-5058 Unauthenticated Command Injection Remote Code Execution in aws-mcp-server https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5058
Post summary
A brief disclosure of CVE-2026-5058 noting an unauthenticated command injection vulnerability that can lead to remote code execution in aws-mcp-server is presented, with no PoC, exploit, or patch information.
[CVE-2026-5058: CRITICAL] Critical remote code execution vulnerability (ZDI-CAN-27968) in aws-mcp-server allows attackers to run arbitrary code without authentication. Ensure immediate patching to stay secure.#cve,CVE-2026-5058,#cybersecurity https://cvefind.com/CVE-2026-5058
Post summary
The tweet announces a critical remote code execution vulnerability in aws-mcp-server and urges users to apply patches immediately.