CVE-2026-12958

mentions 2 type Organization feed RSS

// recent coverage 2 mentions

00:07

2026-06-29

byteiota.com

ai-safety

CVE-2026-12957: Amazon Q Silently Stole Your AWS Keys

Amazon Q Developer's VS Code extension automatically executed MCP server configurations from workspace files without user consent, exposing AWS credentials. Wiz Research disclosed CVE-2026-12957 (CVSS…

04:30

2026-06-27

cryptobriefing.com

ai-tools

Amazon Q Developer flaw allows cloud credential theft via malicious repositories

A vulnerability in Amazon Q Developer, tracked as CVE-2026-12957 with a CVSS score of 8.5, allowed attackers to steal AWS credentials by tricking developers into opening a malicious repository. The fl…

// co-occurs with top 8 entities

Amazon Q Developer 2 Wiz Research 2 AWS 2 CVE-2026-12957 2 Visual Studio Code 1 Claude Code 1 Cursor 1 VS Code 1

// topics top 5 topics

ai tools 2 ai safety 2 developer tools 2 ai products 1 ai infrastructure 1