CVE-2026-18953
HIGHImproper limitation of a pathname to a restricted directory in aws-transform-mcp-server
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2026-18953. PoCs published by ronamosa.
AI-analyzed exploit summary This PoC demonstrates an arbitrary file write vulnerability (CWE-22) in awslabs.aws-transform-mcp-server versions 0.1.0-0.1.4, where the `validate_write_path()` function fails to confine writes to a base directory, allowing attackers to write files outside the intended sandbox via absolute paths or path traversal. The PoC includes both vulnerable and fixed versions of the validation logic for comparison.
Description
Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directory via the savePath parameter. To remediate this issue, users should upgrade to version 0.1.5 or later.
Exploits (1)
This PoC demonstrates an arbitrary file write vulnerability (CWE-22) in awslabs.aws-transform-mcp-server versions 0.1.0-0.1.4, where the `validate_write_path()` function fails to confine writes to a base directory, allowing attackers to write files outside the intended sandbox via absolute paths or path traversal. The PoC includes both vulnerable and fixed versions of the validation logic for comparison.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H