AWS Serverless MCP Server project name path traversal advisory

Evidence record

Read the original source ↗

Claim-level citations (1)

• supportsAWS Serverless MCP project names escaped the deployment-status directory: The maintainer advisory documents that crafted project names can address JSON files outside the intended local deployment-status directory in AWS Serverless MCP Server versions below 0.2.1. Write operations additionally require --enable-write and write deployment metadata; this does not establish arbitrary attacker-chosen file contents. Version 0.2.1 is listed as patched.

  GHSA-r6mm-377j-qg8m: Impact, details of status-file reads and --enable-write writes, Affected versions and Patched versions