AWS API MCP Server OAuth Audience Vulnerability (GHSA-4prq-p2x5-w9fh): How a Missing Audience Check Enables Confused Deputy Attacks and How to Test Your Own Server
AWS MCP server OAuth audience vulnerability GHSA-4prq-p2x5-w9fh explained: how confused deputy attacks work, why v1.6.0 needs configuration, and how to test.