CVE-2026-116635 | AWS Serverless MCP Server up to 0.2.0 Deployment Status path traversal

November 3, 2026 Yanac

A vulnerability was found in AWS Serverless MCP Server up to 0.2.0. It has been rated as problematic. Affected is an unknown function of the component Deployment Status Component. Performing a manipulation results in path traversal.

This vulnerability was named CVE-2026-116635. The attack needs to be approached locally. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More