CVE Intelligence

Amazon Awslabs.dynamodb-mcp-server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Amazon Awslabs.dynamodb-mcp-server: 1 record(s), with affected versions and fixes.

CVE-2026-85654 High · 7.8 CWE-1336 Sep 4, 2026
Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server
Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute names in a data model file.