AWS vulnerabilities
195 CVEs and advisories name AWS as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-126087Untrusted search path in the cross-user process launcher in OpenJD Sessions for Python, as used in the AWS Deadline Cloud worker agent
- CVE-2026-125271AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalization
- CVE-2026-124034Path traversal in Amazon Braket SDK local hybrid job input data download
- CVE-2026-124033Relative path traversal in the log export commands in AWS ParallelCluster CLI
- CVE-2026-119924Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser
- CVE-2026-119923Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser
- CVE-2026-122193OS command injection in the example SSM documents in Trusted Remote Execution (REX)
- CVE-2026-119083GluonTS arbitrary file write during archive extraction
- CVE-2026-122266Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS
- CVE-2026-122192Guest access to Firecracker process memory after a failed memory discard
- CVE-2026-119084Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters
- CVE-2026-121652Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering
- CVE-2026-119922Babelfish for PostgreSQL Privilege Escalation
- CVE-2026-116635Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
- CVE-2026-120497Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
- CVE-2026-119085Template injection in the publishing component of awslabs Virtual Engineering Workbench
- CVE-2026-119301Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
- CVE-2026-119117Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java
- CVE-2026-119148Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint
- CVE-2026-119116Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c
- CVE-2026-119115Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes
- CVE-2026-118029Unverified ownership of the default Athena query result location in AWS SDK for pandas
- CVE-2026-115413AWS API MCP Server OAuth Token Audience Validation Bypass
- CVE-2026-115418SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK)…
- CVE-2026-115845Incomplete validation in the run_script Python sandbox in AWS MCP Server
- CVE-2026-115813Server-side request forgery in the model download path in Amazon Web Services Multi Model Server
- CVE-2026-115812Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server
- CVE-2026-115417Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt
- CVE-2026-115419Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
- CVE-2026-115414OS command injection in the Terraform hook in AWS SAM CLI