Breaking the AWS MCP Python Sandbox
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A security researcher describes bypassing the Python sandbox behind AWS's managed MCP Server tool aws_run_script, which runs user-supplied Python in a Lambda sandbox meant to block dangerous operations.