CVE-2026-87913— Missing S3 bucket ownership verification in the AWS Security Agent MCP server
Quick assessment
Affected
AWS AWS Security Agent MCP server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 AWS Security Agent MCP 服务器 0.2.0 版本之前，由于缺少对 S3 存储桶所有权的验证，远程攻击者可能通过一个名称由公开已知的账户标识符派生的预注册存储桶，获取被扫描工作区的私有源归档文件，其中包含该归档中的凭据和基础设施状态。 为修复此问题，用户应升级至 0.2.0 版本。此外，用户还应核对其账户中的扫描输出存储桶确由自己的账户拥有，因为升级并不会释放第三方已注册的桶名称。
Possible ATT&CK Techniques 3 AI
T1210 · Exploitation of Remote Services T1537 · Transfer Data to Cloud Account T1527
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-87913
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Missing S3 bucket ownership verification in the AWS Security Agent MCP server
Source: CVE Program / CVE List V5
Vulnerability Description
A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage bucket whose name is derived from a publicly known account identifier.
To remediate this issue, users should upgrade to version 0.2.0. Users should also verify that the scan output bucket in their account is owned by their own account, because upgrading does not release a bucket name that a third party has already registered.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
未经验证的属主
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| AWS | AWS Security Agent MCP server | 0.1.0 ~ 0.1.5 | - |
|
II. Public POCs for CVE-2026-87913
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-87913
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-87913 (2)
IV. Related Vulnerabilities
Same vendor: AWS
-
CVE-2026-87912
Missing S3 bucket ownership verification in the AWS Security -
CVE-2026-87911
Read-only enforcement bypass enabling operating system comma -
CVE-2026-85788
Incomplete list of disallowed inputs in awslabs mysql-mcp-se -
CVE-2026-84942
Stored Cross-Site Scripting via Vega Expression Function Byp -
CVE-2026-85781
Unverified access point ownership in Amazon EFS CSI Driver
Same weakness: CWE-283
-
CVE-2026-87912
Missing S3 bucket ownership verification in the AWS Security -
CVE-2026-84386
FortiClient Windows 7.4.0-7.4.7 未验证所有权 -
CVE-2026-85781
Unverified access point ownership in Amazon EFS CSI Driver -
CVE-2026-9745
Vulnerabilities exists in IBM Netezza Software -
CVE-2026-54467
Trusted Firmware-M 权限许可和访问控制问题漏洞
V. Comments for CVE-2026-87913
No comments yet