Amazon Q MCP Auto-Execution via Malicious .amazonq/mcp.json Workspace File

Ibrahim Saud@tektrix

•updated Jun 27, 2026•0•0•4

Detects unexpected subprocesses (bash, sh, npx) spawned by the Amazon Q language server process. This behavior is indicative of a potential exploit targeting the Model Context Protocol (MCP) auto-execution vulnerability (tracked as CVE-2026-12957), where a malicious .amazonq/mcp.json workspace configuration is used to gain unauthorized code execution.