security_agent_mcp_server vulnerabilities

CVEs whose affected-version data names the security_agent_mcp_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-87913Medium· 5.9

2w ago

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state…

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state…

▾ SunlitAWS · AWS Security Agent MCP serverEPSS 0.25%via NVD