AWS Multi Model Server: Two Critical Vulnerabilities Require Immediate Attention

Amazon Web Services Multi Model Server (MMS) has reached end-of-life, but two serious vulnerabilities (CVE-2026-115812 and CVE-2026-115813) affect all versions up to 1.1.11. The first flaw lets attackers execute code by crafting malicious model archives, while the second enables unauthorized network requests through the management interface. If you're still running MMS, you need to migrate away immediately—no patches are coming since the project is archived.