What is 2026-152-AWS?

2026-152-AWS is a security advisory published by AWS Security Bulletins with High severity. CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

Which CVE IDs does 2026-152-AWS cover?

2026-152-AWS covers the following CVE IDs: CVE-2026-115413. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

2026-152-AWSHigh

CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

Vendor

AWS Security Bulletins

Published

October 27, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-115413 →

📋 Description

Bulletin ID: 2026-152-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/27/2026 11:00 AM PDT Description: The AWS API MCP Server is an open source Model Context Protocol (MCP) server that enables AI assistants to interact with AWS services and resources through AWS CLI commands. It can be configured to serve the streamable-http transport with OAuth authentication, validating a bearer token against an identity provider nominated by the operator. We identified CVE-2026-115413 in versions >=1.3.0 and
Impacted versions: >=1.3.0 AND
Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin. Read this article

🔗 References (1)

advisoryhttps://aws.amazon.com/security/security-bulletins/rss/2026-152-aws/