AWS MCP Server — Security Intelligence & Vulnerability Profile

1. Software Identity & Security Posture

Parameter	Technical Specification
Official Name	AWS MCP Server
Vendor / Project	`amazon`
Canonical ID	`amazon:aws_mcp_server`
Versioning Scheme	`semver`
CPE Identifiers	`cpe:2.3:a:amazon:aws_mcp_server::::::::`
Overall Posture	CRITICAL
Recommended Safe Release	2.1.6

Documented CVEs

5 vulnerabilities cataloged in the Hermes intelligence repository.

CISA KEV Entries

0 flaws with confirmed active in-the-wild exploitation.

Weaponized Exploits

5 vulnerabilities with publicly available PoCs or weaponized exploit tooling.

Remediation Target

Recommended upgrade to 2.1.6 to neutralize known flaws.

2. 30-Day Risk Trajectory & Trend Evolution

Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:

Current HTS Score

0 / 100

= Stable over 30d

Max EPSS (Exploitation)

1.9 %

▲ +1.9 % over 30d

CISA KEV Activity

No active KEV

HTS Trend Curve (D-30 → Today)2026-08-12 → 2026-09-10

3. Vulnerability History & Version Applicability Matrix

CVE	CVSS Score	EPSS Probability	CISA KEV	Affected Versions	Fixed In	Hermes Analysis
CVE-2026-87911	9.6 (CRITICAL)	1.0%	No	< v1.1.7	`1.1.7`	Analysis →
CVE-2025-5277	8.8 (HIGH)	1.2%	No	< v1.3.0	`1.3.0`	Analysis →
CVE-2026-5059	8.8 (HIGH)	1.9%	No	< v1.3.2	`1.3.2`	Analysis →
CVE-2026-85654	7.8 (HIGH)	0.1%	No	< v2.1.6	`2.1.6`	Analysis →
CVE-2026-85788	7.5 (HIGH)	0.1%	No	< v1.0.23	`1.0.23`	Analysis →

4. Evaluate Running Versions in Interactive Workbench

Are you operating AWS MCP Server in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas:

Launch Software Intelligence Workbench for AWS MCP Server Run deterministic in-browser evaluation, calculate HTS threat reduction, and plan your upgrade path.