Vulnerability · Published Aug 5, 2026 · Assigned by AMZN

CVE-2026-18954Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server

Medium 5.5

In plain English

A medium-severity incorrect authorization in documentdb-mcp-server from AWS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.2%top 95.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate write operations on the connected database via write-capable aggregation pipeline stages that bypass the read-only mode enforcement logic. To remediate this issue, users should upgrade to version 1.0.12 or later.

Affected products (as reported)

Vendor	Product	Versions
AWS	documentdb-mcp-server	0 – before 1.0.12

Weakness: CWE-863 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References

https://github.com/awslabs/mcp/releases/tag/2026.04.20260408085348 release-notes, patch
https://aws.amazon.com/security/security-bulletins/2026-076-aws/ vendor-advisory
https://github.com/awslabs/mcp/security/advisories/GHSA-j694-4m5j-w8hc release-notes