Threat
CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass
Publication date unknown · Discovered amazon.com
Page published
Publication date unknown · First observed: 31 Oct 2026
Coverage timeline
Single-source advisory — one report is available.
Why it matters
AWS API MCP Server deployments may have weakened authentication boundaries, warranting review of the complete advisory to determine exposure and required action.
AWS identifies CVE-2026-115413 as an OAuth token audience validation bypass in the AWS API MCP Server and labels the bulletin important. The supplied excerpt is truncated and does not establish affected versions, exploitation prerequisites, impact, or remediation.