Security Signal

← Cyber news feed

Confirmed 100VulnerabilityFirst seen 23 Oct 2026, 19:09 UTC

CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

Vendor AWS

Coverage

HeadlineSourceTypePublished
CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server AWS Security BulletinsOfficial23 Oct 2026, 19:09 UTC

Vulnerabilities

CVEExploited (CISA KEV)CVSSEPSS
CVE-2026-115845 No — —

CVSS from NVD; EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days.

Why this score

Most trusted source90
Independent organisations reporting it (1)+0
Confirmed by an official source or CISA KEV+10
Confidence100 · Confirmed
We link to the original reporting and don’t reproduce it. Read the sources above for the full details.