Malicious Amazon Q MCP Config File Creation in Workspace (.amazonq/mcp.json)

Ibrahim Saud@tektrix

•updated Jun 27, 2026•0•0•2

Detects the creation or modification of the .amazonq/mcp.json file in a workspace directory. This file is automatically loaded by the Amazon Q VS Code extension and can be leveraged to achieve remote code execution (RCE) via malicious MCP server command definitions as documented in CVE-2026-12957.