Amazon Q MCP Auto-Execution RCE - Shell Spawn with Credential Exfil Pattern (CVE-2026-12957)

Ibrahim Saud@tektrix

•updated Jun 27, 2026•0•0•3

Detects the Amazon Q Developer language server or extension host spawning suspicious child processes (bash, sh, zsh, python, node) that execute commands involving AWS STS identity retrieval, external data exfiltration via network tools like curl/wget, or direct references to AWS credential environment variables. This pattern is indicative of potential Remote Code Execution (RCE) via malicious Model Context Protocol (MCP) auto-execution.