CVE-2026-12957 Amazon Q MCP Auto-Exec: git-clone to shell spawn chain

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•6

Detects a potential exploitation of CVE-2026-12957, where a malicious git repository contains an MCP (Model Context Protocol) configuration file. When this workspace is opened, the Amazon Q Developer extension for VS Code improperly processes this configuration, resulting in the unauthorized execution of shell processes (cmd.exe, powershell.exe, bash, or sh) by the extension's host processes (code.exe or node.exe).