AWS API MCP Server Security Bypass – Update Required

AWS API MCP Server versions 0.2.13 through 1.5.1 have a nasty bug (CVE-2026-125271) where operation names with consecutive capitals bypass security policies. This means denied or restricted operations could slip through if their names contain uppercase sequences. You'll want to patch to version 1.5.1 or later ASAP.