Skip to content

News / Archive

News

AWS MCP Python Sandbox Bypass Disclosed

A researcher circumvented the Python sandbox in AWS Managed MCP Server’s aws___run_script tool by exploiting AST validator gaps, gaining limited Lambda role credentials; AWS patched the issue after HackerOne disclosure. …

More News