Arbitrary Code Execution in Language Servers for AWS (opens in new tab)

Covered by 3 sources including Wiz Blog, The Hacker News

### Summary Language Servers for AWS (the aws/language-servers project) provide the underlying language-server runtime that powers Amazon Q Developer's AI coding assistance across its IDE plugins ...

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 3 articles

Wiz Blog·

MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension

The Hacker News·

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

AWS·

Covered in 3 articles

MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins