CVE-2026-12957 Amazon Q MCP AWS Credential Theft via Stolen Developer Credentials

Ibrahim Saud@tektrix

•updated Jun 27, 2026•0•0•4

Detects unauthorized or suspicious AWS CLI operations and sensitive IAM API calls initiated from developer tooling processes like VS Code (including the Amazon Q extension host). This behavior is often associated with the exploitation of MCP (Model Context Protocol) auto-execution vulnerabilities, where attackers attempt to use compromised developer environments to escalate privileges or exfiltrate cloud credentials.