A high-severity vulnerability (CVE-2026-12957) in Amazon Q Developer for Visual Studio Code allowed attackers to execute arbitrary code and steal AWS credentials by automatically loading malicious MCP server…
11 articles · Updated June 26, 2026
Recent Intelligence Reports
Amazon Q Developer Vulnerability Allows Code Execution via Malicious Repositories— Gbhackers · June 27, 2026