CVE-2026-18655
Received Received - Intake

Improper Endpoint Restriction in Amazon MQ MCP Server

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: AMZN

Description
Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) before 2.0.24 may allow a remote unauthenticated actor (via prompt injection) to obtain Amazon MQ for RabbitMQ broker credentials or OAuth access tokens sent to a crafted endpoint controlled through a broker hostname introduced in the MCP client context. To remediate this issue, users should upgrade to version 2.0.24.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-04
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-18655
EUVD
EUVD-2026-52406

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
amazon mq_mcp_server 2.0.24

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-923 The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper restriction of endpoints in RabbitMQ broker connection tools of the Amazon MQ MCP Server before version 2.0.24. A remote unauthenticated actor could use prompt injection to trick the MCP client into sending Amazon MQ for RabbitMQ broker credentials or OAuth access tokens to a malicious endpoint controlled by the attacker.

Impact Analysis

An attacker could gain access to sensitive credentials or tokens, potentially allowing them to interact with your RabbitMQ broker or other connected services. This could lead to unauthorized access, data breaches, or further exploitation of your systems.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may violate GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations could face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Upgrade the Amazon MQ MCP Server to version 2.0.24 or later to address the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18655. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart