Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

2026-06-29

A bug in Amazon Q Developer let MCP configs in a cloned repo start local servers that inherited live AWS credentials, enabling command execution without extra login. Wiz showed config-driven theft of the active AWS session, and AWS patched the issue in Language Servers for AWS, requiring updated IDE plugins and adding explicit prompts before untrusted MCP servers run.