ThreatVectr
Tag

#CVE-2026-12957

2 stories taggedCVE-2026-12957.

Photoreal news-editorial photograph, 16:9 framing, top-down overhead view of a modern developer workstation with a dark mechanical keyboard and a large monitor
AI Security

An AI Coding Tool Built Into Millions of Developer Setups Had a Flaw That Could Hand Hackers Your Cloud Keys

A security hole in Amazon's AI coding assistant let criminals steal cloud passwords just by getting a developer to open a poisoned folder. It's patched — but the attack method is spreading.

3 min
Vulnerabilities

Amazon Patches CVE-2026-12957 in Q Developer: Malicious Repo Could Drain AWS Credentials via MCP

A workspace-trust prompt was all that stood between a developer and credential theft. Amazon has shipped a fix for the high-severity flaw in its AI coding assistant.

2 min
© 2026 Threat Vectr