The flaw lies in improper neutralization of special elements in the template engine that the CDK generator of Amazon awslabs.dynamodb-mcp-server uses prior to version 2.1.6. An attacker who controls a data model file can inject special template syntax in table, index, or attribute names, leading the CDK generator to evaluate the injected content during application build and execute arbitrary code on the host that performs the deployment. The primary impact is remote code execution with the privileges of the deployment process, potentially giving full control of the build machine and the infrastructure it creates. The weakness corresponds to CWE‑1336: Improper Neutralization of Special Elements Used in a Template Engine.

All installations of Amazon awslabs.dynamodb-mcp-server released before 2.1.6 are affected. The vulnerability is referenced in the AWS 2026‑097 security bulletin and the Python package distributor lists the vulnerable release at version 2.1.5. Administrators running the CDK generator for DynamoDB model deployment should verify their version and update if necessary.

Based on the description, it is inferred that the likely attack vector is an actor who can supply or modify the data model file. The CVSS score for this vulnerability is 7.1, indicating high severity. EPSS is not available, but because the flaw is exercised during the CDK generation phase, a local actor who can influence the data model file has an avenue to exploit the issue. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires that the attacker can supply or modify a data model file that the CDK generator processes; once the malicious content is embedded, the code runs with the same privileges as the build process.