Adversaries could plant a malicious repository that can execute arbitrary code and steal cloud credentials by exploiting the vulnerability, which showcases growing MCP risk.
Amazon Q VS Extension Flaw Leads to Cloud Credential Theft
Summary + source link. No paywalls, no tracking.