VYPR

Documentdb Mcp Server

by Amazon

CVEs (1)

  • CVE-2026-18954MedAug 5, 2026
    risk 0.36cvss 5.5epss 0.00

    Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate write operations on the connected database via write-capable aggregation pipeline stages that bypass…