Description
A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage bucket whose name is derived from a publicly known account identifier.



To remediate this issue, users should upgrade to version 0.2.0. Users should also verify that the scan output bucket in their account is owned by their own account, because upgrading does not release a bucket name that a third party has already registered.
Published: 2026-09-10
Score: 5.1 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 10 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 10 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
References

Thu, 10 Sep 2026 15:45:00 +0000

Type Values Removed Values Added
Description A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage bucket whose name is derived from a publicly known account identifier. To remediate this issue, users should upgrade to version 0.2.0. Users should also verify that the scan output bucket in their account is owned by their own account, because upgrading does not release a bucket name that a third party has already registered.
Title Missing S3 bucket ownership verification in the AWS Security Agent MCP server
First Time appeared Aws
Aws aws Security Agent Mcp Server
Weaknesses CWE-283
CWE-341
CPEs cpe:2.3:a:aws:aws_security_agent_mcp_server:*:*:*:*:*:*:*:*
Vendors & Products Aws
Aws aws Security Agent Mcp Server
References
Metrics cvssV3_1

{'score': 5.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N'}

cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N'}

Subscriptions

Aws Aws Security Agent Mcp Server
cve-icon MITRE

Status: PUBLISHED

Assigner: AMZN

Published:

Updated: 2026-09-10T16:29:49.389Z

Reserved: 2026-09-09T15:23:10.427Z

Link: CVE-2026-87913

cve-icon Vulnrichment

Updated: 2026-09-10T16:28:15.783Z

cve-icon NVD

Status : Received

Published: 2026-09-10T16:18:07.187

Modified: 2026-09-10T17:17:06.853

Link: CVE-2026-87913

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-10T17:30:10Z

Weaknesses
  • CWE-283

    Unverified Ownership

  • CWE-341

    Predictable from Observable State