CVE lookup

CVE-2026-16584

Pruva has a verified reproduction for CVE-2026-16584: AWS API MCP Server security policy bypass via startup initialization failure. The canonical evidence record is REPRO-2026-00303.

REPRO

REPRO-2026-00303

Package

awslabs.aws-api-mcp-server · pip

Severity

HIGH

Status

published

Open verified reproduction Plain text for agents NVD source