CVE-2026-115413: AWS API Model Context Protocol (MCP) server, missing token audience check

The Common Vulnerabilities and Exposures (CVE) record, assigned by Amazon, says that missing token audience validation in the OAuth authentication mode of the Amazon Web Services (AWS) API Model Context Protocol (MCP) server before version 1.6.0 might allow local users to run AWS operations with the server's configured AWS credentials using an access token issued to another application by the same identity provider; fixed in 1.6.0.

The record

Kind

Vulnerability

Source record

CVE-2026-115413: Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 (National Vulnerability Database record)

Record published

2026-10-27

Posted here

2026-10-28

World

Software agents · Enterprise work agents

Controls concerned

Actor identity verification C-A1; Least-privilege credential scoped to task C-E1

Checked

Checked against its record on 2026-10-30 by a reader who did not draft it; report verification/reports/SIG-2026-10-28-001-2026-10-30.md.

A signal's controls are the ones its record points at, the exposure; a case's controls are the ones its records show were absent or failed, so the two can differ.

Corrections

Changes to what this signal says, with the reason. Every earlier version is kept.

• 2026-10-30: Summary. Abbreviations: AWS was used in the product name before it was spelled out, and CVE was not spelled out; now both spelled out at first use. Precision: the record says the token is one issued to another application 'by the same identity provider'.
  Show the change

  Before: The CVE record, assigned by Amazon, says that missing token audience validation in the OAuth authentication mode of the AWS API Model Context Protocol (MCP) server before version 1.6.0 might allow local users to run Amazon Web Services (AWS) operations with the server's configured AWS credentials using an access token issued to another application; fixed in 1.6.0.

  After: The Common Vulnerabilities and Exposures (CVE) record, assigned by Amazon, says that missing token audience validation in the OAuth authentication mode of the Amazon Web Services (AWS) API Model Context Protocol (MCP) server before version 1.6.0 might allow local users to run AWS operations with the server's configured AWS credentials using an access token issued to another application by the same identity provider; fixed in 1.6.0.

What a signal is. A signal records what a primary record says; it assigns no fault. It is lighter than a case: one dated item from one record, tagged with the world, sector and controls it touches. It becomes a case when it meets the bar for one.

Newer: CVE-2026-118038: Progress Telerik Document Processing Libraries
Older: Federal Motor Vehicle Safety Standards; Modernization of FMVSS No. 108 To Accommodate ADS-Equipped Vehicles