Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-12957

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-12957.

Coverage Span: 2026-06-26
Reports: 1 related reports

Associated Reports & Timeline

MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension

Wiz Research found that the Amazon Q VS Code extension auto-loaded MCP servers from workspace files, letting a malicious repo run code and steal cloud credentials via a git clone (CVE-2026-12957).