Executive brief
AWS HealthOmics MCP Server contains a path traversal vulnerability in its workflow linters that allows attackers to write arbitrary files to the system. This could enable an attacker to overwrite critical configuration files, inject malicious code, or compromise the integrity of genomics data processing workflows.
Technical details
The aws-healthomics-mcp-server contains a path traversal vulnerability in its workflow linters component that permits arbitrary file write operations. The vulnerability likely stems from insufficient sanitization of user-supplied input (such as workflow file paths or linter configuration parameters) before file operations. An attacker can exploit this by crafting malicious workflow definitions or linter inputs containing path traversal sequences (e.g., "../") to write files outside the intended directory. Depending on the privilege level of the service and available write locations, this could enable remote code execution, configuration tampering, or data exfiltration. The attack vector is network-accessible if the MCP server exposes linting functionality to untrusted input. Patch availability should be confirmed via AWS security bulletins.
Affected products
- AWS HealthOmics MCP Server
Timeline
- 2026-09-22: disclosed