Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
https://ift.tt/NvzUHFS high-severity flaw in Amazon Q Developer let a malicious repository run commands and steal a developer’s cloud credentials. The path was short: a developer