AWS API MCP Server: OAuth token audience validation vulnerability (CVE-2026-115413)
AWS API MCP Server before version 1.6.0 lacks proper OAuth audience validation, potentially allowing a local user to run AWS operations with the server's configured credentials via an access token issued to another application.
CVE search metadata
CVE search record: CVE-2026-115413. Severity: high. CVSS: 7.8. KEV: no. Product: AWS API MCP Server (< 1.6.0). Brief: AWS API MCP Server: OAuth token audience validation vulnerability (CVE-2026-115413). Brief link: https://feed.craftedsignal.io/briefs/2026-10-aws-api-mcp-auth/
Triage facts
Revision 1- Applicability
- AWS API MCP Server (< 1.6.0)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Oct 27, 20:04 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
AWS API MCP Server before version 1.6.0 does not perform token audience validation in the OAuth authentication mode. This may allow a local user to execute AWS operations using the server's configured AWS credentials by providing an access token issued to another application by the same identity provider.
To remediate this issue, users should upgrade to version 1.6.0 and configure the expected token audience or client ID for the server.