Executive brief
AWS Transform MCP Server fails to properly validate file path inputs, allowing an attacker to access files outside intended directories. This vulnerability could enable unauthorized disclosure of sensitive data stored on affected systems or compromise the integrity of the service.
Technical details
The AWS Transform MCP Server fails to properly validate or sanitize pathname input, allowing an attacker to traverse directory structures and access files outside the intended application directory. This is a classic path traversal vulnerability (CWE-22) where insufficient validation of user-supplied file paths permits access to arbitrary files on the system. The vulnerability likely requires some form of access to the MCP Server interface (local, network, or through MCP protocol), but the exact attack preconditions are not detailed in the advisory. An attacker exploiting this flaw could read sensitive configuration files, credentials, or other data stored alongside the application. AWS has released a security bulletin indicating awareness of the issue, though specific patch details and affected version ranges are not provided in the available advisory text.
Affected products
- AWS Transform MCP Server
Timeline
- 2026-09-09: disclosed