alexei-led

Products

ProductCVEsExploitedLatest
aws-mcp-server1–May 28, 2025

Exploited and recent CVEs

  • CVE-2025-5277 Critical 9.6 aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system. 1.3%