Back to article
AWS

CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins (opens in new tab)

Covers Arbitrary Code Execution in Language Servers for AWSCovered by 4 sources See all sources covering this story including The Register, SecurityWeek

Covers 1 related story

GitHub·

Arbitrary Code Execution in Language Servers for AWS

Feeds

Covered in 4 articles

The Register·

Amazon Q flaw let booby-trapped Git repos execute code, swipe cloud creds

Feeds
SecurityWeek·

Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories

Feeds
Wiz Blog·

MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension

Feeds
The Hacker News·

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help