Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-07-09 · source-backed
Wiz disclosed CVE-2026-12957 and CVE-2026-12958 in Amazon Q Developer, where the agent loaded MCP server configs straight out of a repo's .amazonq/mcp.json with no consent check and no workspace-trust gate. A booby-trapped repo could reach arbitrary code execution and steal AWS credentials just by being opened. In July the NSA responded with an official MCP Cybersecurity Information Sheet covering the inverted client-server pattern and arbitrary-code-execution exposure. This is now the canonical example of the rule agents keep breaking: workspace files are untrusted input, never trusted config. If your agent reads a dotfile from a cloned repo and acts on it, you have this bug.
Each link below shares sources, entities, or timing with this story.
Amazon released AWS / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Amazon released AWS); both cover Amazon, AWS, CVE, Developer; cite the same source (CVE-2026-12957 and CVE-2026-12958).
Amazon released AWS / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Amazon released AWS); both cover Amazon, AWS, Developer; overlapping topics (agent, amazon).
Amazon released Kiro / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Amazon released Kiro); both cover Amazon, MCP; overlapping topics (agent, amazon).
Anthropic partners with Amazon / Shared entities / What happened next
Linked by a graph relationship (Anthropic partners with Amazon); both cover Amazon, AWS, MCP; picks up the Amazon thread on 2026-08-07.
Amazon released AWS / Shared entities / What happened next
Linked by a graph relationship (Amazon released AWS); both cover Amazon, AWS, MCP; picks up the Amazon thread on 2026-08-05.
Linked by a graph relationship (Amazon released AWS); both cover AWS, CVE, MCP; picks up the AWS thread on 2026-07-11.
Amazon released Kiro / Shared entities / Earlier coverage
Linked by a graph relationship (Amazon released Kiro); both cover Amazon, CVE, Developer; earlier Amazon coverage from 2026-03-30.
Amazon invested in OpenAI / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Amazon invested in OpenAI); both cover AWS, MCP; overlapping topics (agent, config).