CVE-2026-12957 Malicious .amazonq/mcp.json Shell Execution via Amazon Q VS Code

Ibrahim Saud@tektrix

•updated Jun 26, 2026•0•0•2

Detects instances where common shell or command-line tools are spawned by Amazon Q processes (amazonq-language-server) or development-related processes (Code.exe, node) shortly after the creation or access of the 'mcp.json' configuration file within an '.amazonq' directory. This behavior may indicate an attacker using development tool vulnerabilities or compromised extensions to execute arbitrary commands.