🟠 High | Source: AWS Security Bulletins
A path traversal vulnerability (CVE-2026-18953) has been identified in the AWS Transform MCP Server, an open-source tool that runs locally on developer machines to connect AI assistants with AWS code-transformation services. Versions 0.1.0 through 0.1.4 contain a flaw in the get_resource tool that allows a malicious actor to write files outside the intended working directory via an unsanitised savePath parameter. This could ultimately result in local code execution on the developer’s machine.
Security Architect’s Take: Ensure any developers using awslabs.aws-transform-mcp-server upgrade immediately to version 0.1.5 or later, and audit your AI/MCP toolchain inventory — the local execution context means a compromised developer machine could serve as a pivot point into your AWS environment.
Original advisory: CVE-2026-18953 - Improper limitation of a pathname in AWS Transform MCP Server