cve-2025-63604

{
  "cvss": 6.5,
  "datePublished": "2025-11-18T16:15:46.060",
  "dateUpdated": "2026-11-05T23:10:00.150",
  "description": "A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the execute_query method. The vulnerability stems from the exposure of dangerous Python built-in functions (__import__, getattr, hasattr) in the execution namespace and the direct use of exec() to execute user-supplied code. An attacker can craft malicious queries to execute arbitrary Python code, leading to AWS credential theft (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY), file system access, environment variable disclosure, and potential system compromise. The vulnerability allows attackers to bypass intended security controls and gain unauthorized access to sensitive AWS resources and credentials stored in the server's environment.",
  "id": "CVE-2025-63604",
  "raw": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "cve@mitre.org"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:baryhuang:aws_resources_mcp_server:0.1.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "02CE48B3-B74F-4DFF-BE43-AC016B9DB9AD",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the execute_query method. The vulnerability stems from the exposure of dangerous Python built-in functions (__import__, getattr, hasattr) in the execution namespace and the direct use of exec() to execute user-supplied code. An attacker can craft malicious queries to execute arbitrary Python code, leading to AWS credential theft (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY), file system access, environment variable disclosure, and potential system compromise. The vulnerability allows attackers to bypass intended security controls and gain unauthorized access to sensitive AWS resources and credentials stored in the server's environment."
      },
      {
        "lang": "es",
        "value": "Una vulnerabilidad de inyección de código existe en baryhuang/mcp-server-aws-resources-python 0.1.0 que permite la ejecución remota de código a través de validación de entrada insuficiente en el método execute_query. La vulnerabilidad se origina en la exposición de funciones integradas peligrosas de Python (__import__, getattr, hasattr) en el namespace de ejecución y el uso directo de exec() para ejecutar código proporcionado por el usuario. Un atacante puede elaborar consultas maliciosas para ejecutar código Python arbitrario, lo que lleva al robo de credenciales de AWS (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY), acceso al sistema de archivos, divulgación de variables de entorno y un posible compromiso del sistema. La vulnerabilidad permite a los atacantes eludir los controles de seguridad previstos y obtener acceso no autorizado a recursos y credenciales sensibles de AWS almacenados en el entorno del servidor."
      }
    ],
    "id": "CVE-2025-63604",
    "lastModified": "2026-11-05T23:10:00.150",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.5,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-63604",
            "options": [
              {
                "exploitation": "poc"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-11-18T17:05:28.154529Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-11-18T16:15:46.060",
    "references": [
      {
        "source": "cve@mitre.org",
        "tags": [
          "Exploit",
          "Issue Tracking",
          "Third Party Advisory"
        ],
        "url": "https://github.com/baryhuang/mcp-server-aws-resources-python/issues/8"
      }
    ],
    "sourceIdentifier": "cve@mitre.org",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-77"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "severity": "MEDIUM",
  "source": "nvd",
  "title": "A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code exec..."
}