Back Feeds.4Sysops

Amazon Q vulnerability allowed malicious Git repositories to steal cloud credentials

Feeds.4Sysops •IT News • June 26, 2026

A high-severity vulnerability in the Amazon Q Developer extension for Visual Studio Code allowed attackers to execute arbitrary code on a developer's workstation. The flaw, tracked as CVE-2026-12957, stemmed from the automatic loading of Model Context Protocol (MCP) configurations found within a repository's hidden directory. When a developer opened a booby-trapped project and activated the AI assistant, the extension executed commands defined in the configuration file without requesting user consent. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Amazon Q Developer Vulnerability Enables Cloud Credential Theft A high-severity vulnerability (CVE-2026-12957) in Amazon Q Developer for Visual Studio Code allowed attackers to execute arbitrary code and steal AWS credentials by automatically loading malicious MCP server configurations from cloned repositories. Discovered by Wiz Research, the flaw permits silent execution of commands without user consent, inheriting the developer's environment variables. Amazon patched the issue on May 12, 2026, but the public disclosure occurred on June 26, 2026. The vulnerability affects multiple IDEs, including Visual Studio Code, JetBrains, and Eclipse. Similar vulnerabilities have been reported in other AI coding tools, indicating a systemic risk in the development ecosystem. Users are advised to update to version 1.69.0 for comprehensive protection. 11 sources 74

Extracted Entities

Amazon Q vulnerability allowed malicious Git repositories to steal cloud credentials

The full story

Extracted Entities

Attack Types (2)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (2)

Platforms (1)