Amazon Web Services Multi Model Server (MMS), a tool for serving machine learning models, has reached its end of life. The source repository for MMS is now archived and read-only as of November 20, 2025. Two critical vulnerabilities have been identified in MMS. The first vulnerability, CVE-2026-115812, allows a crafted model archive to write files outside its designated directory. This could potentially lead to code execution with the privileges of the MMS process. The second vulnerability, CVE-2026-115813, affects the model download path within MMS. This flaw may enable the management interface to direct requests to unintended network destinations. All released versions of MMS, up to and including version 1.1.11, are impacted by these issues. Users are strongly advised to consult the linked article for the most current and comprehensive details. This bulletin requires immediate attention due to the severity of the identified vulnerabilities.