CVE-2026-18954

Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate write operations on the connected database via write-capable aggregation pipeline stages that bypass the read-only mode enforcement logic. To remediate this issue, users should upgrade to version 1.0.12 or later.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://aws.amazon.com/security/security-bulletins/2026-076-aws/	Vendor Advisory
https://github.com/awslabs/mcp/releases/tag/2026.04.20260408085348	Release Notes
https://github.com/awslabs/mcp/security/advisories/GHSA-j694-4m5j-w8hc	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:amazon:documentdb_mcp_server:*:*:*:*:*:python:*:*

History

23 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Autorización incorrecta en la herramienta de pipeline de agregación en el servidor MCP de Amazon AWS Labs DocumentDB anterior a la versión 1.0.12 podría permitir a un cliente MCP autenticado realizar operaciones de escritura inapropiadas en la base de datos conectada a través de etapas de pipeline de agregación con capacidad de escritura que eluden la lógica de aplicación del modo de solo lectura. Para remediar este problema, los usuarios deben actualizar a la versión 1.0.12 o posterior.

Information

Published : 2026-08-05 20:17

Updated : 2026-10-23 21:10

NVD link : CVE-2026-18954

Mitre link : CVE-2026-18954

CVE.ORG link : CVE-2026-18954

JSON object : View

Products Affected

amazon

documentdb_mcp_server

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2026-18954", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-18954", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-06T13:11:40.451069Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}], "cvssMetricV40": [{"type": "Secondary", "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.7, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "ff89ba41-3aa1-4d27-914a-91399e9639e5", "affectedData": [{"vendor": "AWS", "product": "documentdb-mcp-server", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.12", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-05T20:17:08.233", "references": [{"url": "https://aws.amazon.com/security/security-bulletins/2026-076-aws/", "tags": ["Vendor Advisory"], "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5"}, {"url": "https://github.com/awslabs/mcp/releases/tag/2026.04.20260408085348", "tags": ["Release Notes"], "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5"}, {"url": "https://github.com/awslabs/mcp/security/advisories/GHSA-j694-4m5j-w8hc", "tags": ["Vendor Advisory"], "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate write operations on the connected database via write-capable aggregation pipeline stages that bypass the read-only mode enforcement logic.\n\n\n\nTo remediate this issue, users should upgrade to version 1.0.12 or later."}, {"lang": "es", "value": "Autorizaci\u00f3n incorrecta en la herramienta de pipeline de agregaci\u00f3n en el servidor MCP de Amazon AWS Labs DocumentDB anterior a la versi\u00f3n 1.0.12 podr\u00eda permitir a un cliente MCP autenticado realizar operaciones de escritura inapropiadas en la base de datos conectada a trav\u00e9s de etapas de pipeline de agregaci\u00f3n con capacidad de escritura que eluden la l\u00f3gica de aplicaci\u00f3n del modo de solo lectura.\n\nPara remediar este problema, los usuarios deben actualizar a la versi\u00f3n 1.0.12 o posterior."}], "lastModified": "2026-10-23T21:10:00.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:amazon:documentdb_mcp_server:*:*:*:*:*:python:*:*", "vulnerable": true, "matchCriteriaId": "68613EFB-317A-4B5D-96E8-AA011B1CA14B", "versionEndExcluding": "1.0.12"}], "operator": "OR"}]}], "sourceIdentifier": "ff89ba41-3aa1-4d27-914a-91399e9639e5"}