MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension

T1Covered by 1 source · first reported by Wiz Research at 26 Jun, 12:00 UTC

By automatically loading MCP servers from workspace files, Amazon Q enabled attackers to execute code and access sensitive cloud environments.