Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

awslabs/mcp

              main @ 3a52945
            

Fixes

CVEs

CRITICAL

Peak severity

30.0%

Coverage

Highlights

Path Traversal: 21 prior fixes. Scrutinize any change in this area.

src/postgres-mcp-server/awslabs/postgres_mcp_server/server.py: most-fixed (4 issues). Treat as high-risk during review.

64 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Numerous tools across the MCP suite (such as the AWS CLI patcher, S3 sync operations, and EKS configuration handlers) accept user-supplied directories and filenames. Multiple fixes show a pattern of failing to fully canonicalize paths or verify strict directory boundaries, leading to arbitrary host filesystem exposure.

Auth Bypass: Read-only mode enforcement frequently relied on naive substring searches or fragile regular expressions to detect mutating queries. Attackers bypass these check layers using stacked statements, special comments, or specialized functions to execute write queries.

SQL Injection: String interpolation and f-string formatting in dynamic query builders exposed database schemas to injection attacks. Safe query parameterized boundaries must be enforced rather than manual concatenation.