CVE Tools
Track your stack

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

The Hacker NewsBy The Hacker News

PatchAmazon Q Developer

Our summary

A high-severity issue in Amazon Q Developer could allow a malicious repository to trigger command execution and potentially steal developers’ cloud credentials through Model Context Protocol (MCP) server settings. The vulnerability is tracked as CVE-2026-12957 (CVSS 8.5) and affects the Language Servers for AWS component used by Amazon Q across VS Code, JetBrains, Eclipse, and Visual Studio, where repo-bundled MCP configuration could lead to running attacker-defined servers in the developer’s environment. This matters because it can turn trusted code checkout into unauthorized access to AWS identity and sensitive credentials unless systems are updated with the vendor’s fix.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

  1. Dark ReadingAmazon Q VS Extension Flaw Leads to Cloud Credential TheftCVE-2025-54136, CVE-2025-59536 +2
  2. The Hacker NewsGhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding AgentsCVE-2026-12957, CVE-2026-12958
  3. SecurityWeekAmazon Q Flaw Enabled Cloud Credential Theft via Malicious RepositoriesCVE-2026-12957, CVE-2026-12958
  4. The Hacker NewsCritical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run CommandsCVE-2025-54136
  5. The Hacker News⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and MoreCVE-2026-12957
  6. Check Point ResearchAI Threat Landscape Digest March-April 2026CVE-2025-59536

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store