[CVE-2026-12957] MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension

CVE

CVE-2026-12957

Published

2026-06-26 12:00

Collected

2026-08-29 00:53

---
id: 6807
title: "[CVE-2026-12957] MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension"
cve: CVE-2026-12957
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/amazon-q-vulnerability"
published_at: "2026-06-26T12:00:01Z"
tags: ["cloud", "vulnerability-research", "credential-theft", "mcp", "ai-coding-assistants", "vscode-extension", "amazon-q", "cve-2026-12957"]
phying_url: "https://phying.com/item/6807"
lang: en
---

# [CVE-2026-12957] MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension

## Summary

Wiz Research found that the Amazon Q VS Code extension auto-loaded MCP servers from workspace files, letting a malicious repo run code and steal cloud credentials via a git clone (CVE-2026-12957).

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2026-12957
- **Published:** 2026-06-26T12:00:01Z
- **Original:** https://www.wiz.io/blog/amazon-q-vulnerability
- **Phying News:** https://phying.com/item/6807