CVE-2026-18954

Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate write operations on the connected database via write-capable aggregation pipeline stages that bypass the read-only mode enforcement logic. To remediate this issue, users should upgrade to version 1.0.12 or later.

CVSS 4.0

5.7CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-25)

CWE

CWE-863

Published

2026-08-05

Modified

2026-10-23

Record from

the NVD, synced 2026-10-24

Affected

• amazon:documentdb_mcp_server

References

• https://aws.amazon.com/security/security-bulletins/2026-076-aws/
• https://github.com/awslabs/mcp/releases/tag/2026.04.20260408085348
• https://github.com/awslabs/mcp/security/advisories/GHSA-j694-4m5j-w8hc

Check your stackJSON