CVE-2026-85654

The CDK generator in Amazon awslabs.dynamodb-mcp-server versions prior to 2.1.6 is vulnerable due to improper handling of special elements in its template engine, potentially allowing an attacker to execute arbitrary code on the host deploying the application. This vulnerability poses a significant risk, especially for organizations using this tool to manage DynamoDB applications, as it could lead to unauthorized access and control over critical systems. Users of affected versions should prioritize immediate updates to mitigate the risk of exploitation.