AWS Serverless MCP Server fixes deployment status directory out-of-bounds vulnerability

AWS fixed CVE-2026-116635 in AWS Serverless MCP Server; versions before v0.2.1 are affected and it is fixed in v0.2.1. The vulnerability stems from improper pathname restrictions on restricted directories in the deployment status component; an actor able to influence the MCP agent's behavior could use it to read JSON files outside the target deployment status directory, and when write permissions are enabled, could also create or overwrite JSON files outside that directory. The advisory said the issue can be reached via directory traversal sequences or absolute paths provided in project name input. AWS said there are no temporary mitigations, recommends upgrading to the latest version, and asks that forked or derived code also be patched, and thanked Syed Anas Mohiuddin for participating through the coordinated vulnerability disclosure process.