CVE-2026-12957 Amazon Q MCP Auto-Execution via .amazonq/mcp.json in Cloned Repo

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•0

This rule detects the creation of a 'mcp.json' configuration file within an '.amazonq' directory shortly after version control system operations such as 'git clone', 'git pull', 'npm install', or 'pip install'. This activity may indicate an attempt to configure or persist unauthorized developer tools or malicious assistant configurations within a development environment.