AWS MCP Server Python Sandbox Bypass – Patch Required

AWS MCP Server's run_script tool has a validation bypass (CVE-2026-115845) that could let authenticated users execute arbitrary code in their isolated session. The Python code validator has an incomplete blocklist, creating a security gap. You should review your MCP Server usage and apply fixes when AWS releases them—this one needs your attention.