# cve.now: AWS

The newest entries naming AWS as an affected vendor (up to 200), of 195 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-126087](https://cve.now/CVE-2026-126087.md): Untrusted search path in the cross-user process launcher in OpenJD Sessions for Python, as used in the AWS Deadline Cloud worker agent (CVSS 8.8)
- [CVE-2026-125271](https://cve.now/CVE-2026-125271.md): AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalization (CVSS 7.8)
- [CVE-2026-124034](https://cve.now/CVE-2026-124034.md): Path traversal in Amazon Braket SDK local hybrid job input data download (CVSS 6.4)
- [CVE-2026-124033](https://cve.now/CVE-2026-124033.md): Relative path traversal in the log export commands in AWS ParallelCluster CLI (CVSS 6.4)
- [CVE-2026-119924](https://cve.now/CVE-2026-119924.md): Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser (CVSS 8.1)
- [CVE-2026-119923](https://cve.now/CVE-2026-119923.md): Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser (CVSS 9.8)
- [CVE-2026-122193](https://cve.now/CVE-2026-122193.md): OS command injection in the example SSM documents in Trusted Remote Execution (REX) (CVSS 9.9)
- [CVE-2026-119083](https://cve.now/CVE-2026-119083.md): GluonTS arbitrary file write during archive extraction (CVSS 7.8)
- [CVE-2026-122266](https://cve.now/CVE-2026-122266.md): Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS (CVSS 8.7)
- [CVE-2026-122192](https://cve.now/CVE-2026-122192.md): Guest access to Firecracker process memory after a failed memory discard (CVSS 7.5)
- [CVE-2026-119084](https://cve.now/CVE-2026-119084.md): Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters (CVSS 8.1)
- [CVE-2026-121652](https://cve.now/CVE-2026-121652.md): Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering (CVSS 5.4)
- [CVE-2026-119922](https://cve.now/CVE-2026-119922.md): Babelfish for PostgreSQL Privilege Escalation (CVSS 8.8)
- [CVE-2026-116635](https://cve.now/CVE-2026-116635.md): Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server (CVSS 6.1)
- [CVE-2026-120497](https://cve.now/CVE-2026-120497.md): Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows (CVSS 5.0)
- [CVE-2026-119085](https://cve.now/CVE-2026-119085.md): Template injection in the publishing component of awslabs Virtual Engineering Workbench (CVSS 8.8)
- [CVE-2026-119301](https://cve.now/CVE-2026-119301.md): Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas (CVSS 7.9)
- [CVE-2026-119117](https://cve.now/CVE-2026-119117.md): Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java (CVSS 6.5)
- [CVE-2026-119148](https://cve.now/CVE-2026-119148.md): Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint (CVSS 6.5)
- [CVE-2026-119116](https://cve.now/CVE-2026-119116.md): Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c (CVSS 7.8)
- [CVE-2026-119115](https://cve.now/CVE-2026-119115.md): Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes (CVSS 8.5)
- [CVE-2026-118029](https://cve.now/CVE-2026-118029.md): Unverified ownership of the default Athena query result location in AWS SDK for pandas (CVSS 5.9)
- [CVE-2026-115413](https://cve.now/CVE-2026-115413.md): AWS API MCP Server OAuth Token Audience Validation Bypass (CVSS 7.8)
- [CVE-2026-115418](https://cve.now/CVE-2026-115418.md): SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK)… (CVSS 7.3)
- [CVE-2026-115845](https://cve.now/CVE-2026-115845.md): Incomplete validation in the run\_script Python sandbox in AWS MCP Server (CVSS 6.4)
- [CVE-2026-115813](https://cve.now/CVE-2026-115813.md): Server-side request forgery in the model download path in Amazon Web Services Multi Model Server (CVSS 5.8)
- [CVE-2026-115812](https://cve.now/CVE-2026-115812.md): Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server (CVSS 9.8)
- [CVE-2026-115417](https://cve.now/CVE-2026-115417.md): Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt (CVSS 7.5)
- [CVE-2026-115419](https://cve.now/CVE-2026-115419.md): Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server (CVSS 8.1)
- [CVE-2026-115414](https://cve.now/CVE-2026-115414.md): OS command injection in the Terraform hook in AWS SAM CLI (CVSS 7.8)
- [CVE-2026-115416](https://cve.now/CVE-2026-115416.md): Incorrect authorization checks in Amazon Athena engine version 3 query processing (CVSS 7.7)
- [CVE-2026-112408](https://cve.now/CVE-2026-112408.md): Missing bucket ownership verification in Amazon SageMaker Python SDK default\_bucket() (CVSS 8.1)
- [CVE-2026-112407](https://cve.now/CVE-2026-112407.md): Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications (CVSS 8.8)
- [CVE-2026-110812](https://cve.now/CVE-2026-110812.md): Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune (CVSS 9.9)
- [CVE-2026-110248](https://cve.now/CVE-2026-110248.md): Insertion of sensitive information into log files in Amazon SageMaker Python SDK git\_utils\[.\]py (CVSS 5.3)
- [CVE-2026-108096](https://cve.now/CVE-2026-108096.md): Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category (CVSS 6.5)
- [CVE-2026-107783](https://cve.now/CVE-2026-107783.md): Insertion of sensitive information into log file in AWS Tools for PowerShell (CVSS 5.9)
- [CVE-2026-107608](https://cve.now/CVE-2026-107608.md): Improper link resolution in asset bundling output handling in aws-cdk-lib (CVSS 6.8)
- [CVE-2026-107322](https://cve.now/CVE-2026-107322.md): OS command injection in Amazon Agent Plugins for AWS databases-on-aws (CVSS 8.5)
- [CVE-2026-107332](https://cve.now/CVE-2026-107332.md): Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code (CVSS 6.8)
- [CVE-2026-107352](https://cve.now/CVE-2026-107352.md): Missing authorization checks in Amazon Athena engine version 3 request handling (CVSS 7.7)
- [CVE-2026-106032](https://cve.now/CVE-2026-106032.md): Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import (CVSS 5.7)
- [CVE-2026-105812](https://cve.now/CVE-2026-105812.md): Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import (CVSS 8.8)
- [CVE-2026-105811](https://cve.now/CVE-2026-105811.md): Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS (CVSS 7.1)
- [CVE-2026-104019](https://cve.now/CVE-2026-104019.md): OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio (CVSS 9.0)
- [CVE-2026-103958](https://cve.now/CVE-2026-103958.md): Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS (CVSS 7.6)
- [CVE-2026-103957](https://cve.now/CVE-2026-103957.md): Server-side request forgery in the OAuth2 discovery handling in Loom for AWS (CVSS 6.2)
- [CVE-2026-103956](https://cve.now/CVE-2026-103956.md): Missing authentication for critical function in Loom for AWS (CVSS 10.0)
- [CVE-2026-104002](https://cve.now/CVE-2026-104002.md): Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python) (CVSS 5.3)
- [CVE-2026-97662](https://cve.now/CVE-2026-97662.md): Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace (CVSS 8.2)
- [CVE-2026-103505](https://cve.now/CVE-2026-103505.md): AWS EFS CSI Driver Mount Option Injection via mounttargetipmap (CVSS 6.5)
- [CVE-2026-100308](https://cve.now/CVE-2026-100308.md): GluonTS arbitrary command execution during model deserialization (CVSS 7.8)
- [CVE-2026-96883](https://cve.now/CVE-2026-96883.md): Type confusion in AWS pgcollection allows remote code execution (CVSS 8.8)
- [CVE-2026-94450](https://cve.now/CVE-2026-94450.md): Potential denial of service when configured to send Retry packets in s2n-quic (CVSS 7.5)
- [CVE-2026-92943](https://cve.now/CVE-2026-92943.md): Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python (CVSS 8.1)
- [CVE-2026-86831](https://cve.now/CVE-2026-86831.md): Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS (CVSS 8.7)
- [CVE-2026-86830](https://cve.now/CVE-2026-86830.md): Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center (CVSS 7.2)
- [CVE-2026-89332](https://cve.now/CVE-2026-89332.md): Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration (CVSS 5.5)
- [CVE-2026-89090](https://cve.now/CVE-2026-89090.md): Denial of service in the event stream header decoder in AWS SDK for Go v2 (CVSS 5.9)
- [CVE-2026-18061](https://cve.now/CVE-2026-18061.md): Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin (CVSS 5.9)
- [CVE-2026-89066](https://cve.now/CVE-2026-89066.md): OS command injection in the task synthesis component in projen (CVSS 7.8)
- [CVE-2026-89065](https://cve.now/CVE-2026-89065.md): Relative path traversal in the generated file manifest cleanup component in projen (CVSS 7.1)
- [CVE-2026-89049](https://cve.now/CVE-2026-89049.md): Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent (CVSS 9.9)
- [CVE-2026-87913](https://cve.now/CVE-2026-87913.md): Missing S3 bucket ownership verification in the AWS Security Agent MCP server (CVSS 5.9)
- [CVE-2026-87912](https://cve.now/CVE-2026-87912.md): Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops (CVSS 5.9)
- [CVE-2026-87911](https://cve.now/CVE-2026-87911.md): Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server (CVSS 9.6)
- [CVE-2026-85788](https://cve.now/CVE-2026-85788.md): Incomplete list of disallowed inputs in awslabs mysql-mcp-server (CVSS 5.5)
- [CVE-2026-84942](https://cve.now/CVE-2026-84942.md): Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards (CVSS 8.7)
- [CVE-2026-85781](https://cve.now/CVE-2026-85781.md): Unverified access point ownership in Amazon EFS CSI Driver (CVSS 5.1)
- [CVE-2026-85028](https://cve.now/CVE-2026-85028.md): Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit (CVSS 7.8)
- [CVE-2026-85012](https://cve.now/CVE-2026-85012.md): OS command injection in the Amazon CodeCatalyst blueprints SDK (CVSS 8.0)
- [CVE-2026-83551](https://cve.now/CVE-2026-83551.md): Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path (CVSS 7.2)
- [CVE-2026-81838](https://cve.now/CVE-2026-81838.md): Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac) (CVSS 6.8)
- [CVE-2026-77811](https://cve.now/CVE-2026-77811.md): Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards (CVSS 8.7)
- [CVE-2026-77810](https://cve.now/CVE-2026-77810.md): Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector (CVSS 9.9)
- [CVE-2026-18420](https://cve.now/CVE-2026-18420.md): RCE via Prototype Pollution in OpenSearch Dashboards (CVSS 8.8)
- [CVE-2026-75910](https://cve.now/CVE-2026-75910.md): Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template (CVSS 6.5)
- [CVE-2026-75897](https://cve.now/CVE-2026-75897.md): Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards (CVSS 7.5)
- [CVE-2026-18428](https://cve.now/CVE-2026-18428.md): SQL Query Validation Bypass in OpenSearch Direct Query (CVSS 8.7)
- [CVE-2026-19643](https://cve.now/CVE-2026-19643.md): Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platforms (CVSS 5.3)
- [CVE-2026-19642](https://cve.now/CVE-2026-19642.md): Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cpp (CVSS 5.9)
- [CVE-2026-18952](https://cve.now/CVE-2026-18952.md): Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin (CVSS 8.6)
- [CVE-2026-19311](https://cve.now/CVE-2026-19311.md): Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin (CVSS 8.6)
- [CVE-2026-19111](https://cve.now/CVE-2026-19111.md): Insecure direct object reference in Strands Agents Tools memory tool namespace isolation (CVSS 8.1)
- [CVE-2026-18954](https://cve.now/CVE-2026-18954.md): Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server (CVSS 5.5)
- [CVE-2026-18953](https://cve.now/CVE-2026-18953.md): Improper limitation of a pathname to a restricted directory in aws-transform-mcp-server (CVSS 8.6)
- [CVE-2026-18830](https://cve.now/CVE-2026-18830.md): Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API (CVSS 8.1)
- [CVE-2026-18733](https://cve.now/CVE-2026-18733.md): Prompt injection bypasses shell tool consent gate in Strands Agents Tools (CVSS 8.8)
- [CVE-2026-18654](https://cve.now/CVE-2026-18654.md): Disabled SSH host key verification in Amazon AWS CLI EMR helper commands (CVSS 6.9)
- [CVE-2026-18655](https://cve.now/CVE-2026-18655.md): Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection (CVSS 6.5)
- [CVE-2026-18394](https://cve.now/CVE-2026-18394.md): Incorrect authorization in Strands Agents Tools http\_request proxy credential exfiltration (CVSS 7.4)
- [CVE-2026-18481](https://cve.now/CVE-2026-18481.md): Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft (CVSS 7.3)
- [CVE-2026-18140](https://cve.now/CVE-2026-18140.md): Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers (CVSS 7.5)
- [CVE-2026-18245](https://cve.now/CVE-2026-18245.md): Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react (CVSS 9.0)
- [CVE-2026-16796](https://cve.now/CVE-2026-16796.md): Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install\_packages() (CVSS 7.3)
- [CVE-2026-16756](https://cve.now/CVE-2026-16756.md): Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service (CVSS 7.5)
- [CVE-2026-16584](https://cve.now/CVE-2026-16584.md): AWS API MCP Server Security Policy Bypass via Startup Failure (CVSS 7.0)
- [CVE-2026-16317](https://cve.now/CVE-2026-16317.md): Silent Drop of TLS 1.3 Encrypted Records in s2n-tls (CVSS 6.5)
- [CVE-2026-15957](https://cve.now/CVE-2026-15957.md): Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes (CVSS 7.5)
- [CVE-2026-15415](https://cve.now/CVE-2026-15415.md): Path traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-server (CVSS 6.8)
- [CVE-2026-12283](https://cve.now/CVE-2026-12283.md): SQL injection in Amazon Athena Synapse connector (CVSS 6.1)
- [CVE-2026-15737](https://cve.now/CVE-2026-15737.md): Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK (CVSS 5.7)
- [CVE-2026-15895](https://cve.now/CVE-2026-15895.md): OS command injection in jsii-diff in AWS jsii (CVSS 8.4)
- [CVE-2026-15643](https://cve.now/CVE-2026-15643.md): AWS HealthLake MCP Server SSRF via Pagination URL (CVSS 9.2)
- [CVE-2026-14904](https://cve.now/CVE-2026-14904.md): RES Auth.GetUserPrivateKey Arbitrary File Read (CVSS 7.1)
- [CVE-2026-14471](https://cve.now/CVE-2026-14471.md): Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registry (CVSS 8.1)
- [CVE-2026-14265](https://cve.now/CVE-2026-14265.md): RCE via Deserialization in AWS Advanced JDBC Wrapper (CVSS 7.5)
- [CVE-2026-13760](https://cve.now/CVE-2026-13760.md): OS Command Injection in aws-cdk-lib Docker Bundling (CVSS 7.3)
- [CVE-2026-13769](https://cve.now/CVE-2026-13769.md): Overly permissive File Permissions in AWS CLI (CVSS 5.5)
- [CVE-2026-13763](https://cve.now/CVE-2026-13763.md): HTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAF (CVSS 9.8)
- [CVE-2026-13762](https://cve.now/CVE-2026-13762.md): HTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAF (CVSS 9.8)
- [CVE-2026-12530](https://cve.now/CVE-2026-12530.md): Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install\_packages() (CVSS 8.4)
- [CVE-2026-11931](https://cve.now/CVE-2026-11931.md): Insecure Permissions on Authentication Token Cache File in Kiro IDE (CVSS 6.8)
- [CVE-2026-12043](https://cve.now/CVE-2026-12043.md): Heap double-free in AWS Common Runtime aws-c-http (CVSS 8.8)
- [CVE-2026-10740](https://cve.now/CVE-2026-10740.md): Excessive memory allocation in s2n-quic (CVSS 5.3)
- [CVE-2026-11417](https://cve.now/CVE-2026-11417.md): OS Command Injection in NodejsFunction Bundling in aws-cdk-lib (CVSS 7.3)
- [CVE-2026-11393](https://cve.now/CVE-2026-11393.md): Code injection via improper triple-quote escaping in AgentCore CLI Bedrock Agent import (CVSS 9.0)
- [CVE-2026-11401](https://cve.now/CVE-2026-11401.md): Privilege Escalation in AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL (CVSS 8.0)
- [CVE-2026-11400](https://cve.now/CVE-2026-11400.md): Privilege Escalation in AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL (CVSS 8.0)
- [CVE-2026-10584](https://cve.now/CVE-2026-10584.md): HTTPS Fallback to HTTP in Graph Explorer (CVSS 5.9)
- [CVE-2026-10591](https://cve.now/CVE-2026-10591.md): Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths (CVSS 8.8)
- [CVE-2026-9291](https://cve.now/CVE-2026-9291.md): Insecure Deserialization in Amazon Braket SDK Job Results Processing (CVSS 7.1)
- [CVE-2026-9255](https://cve.now/CVE-2026-9255.md): Tool Execution Without Authorization via Piped Stdin in Kiro CLI (CVSS 7.8)
- [CVE-2026-9133](https://cve.now/CVE-2026-9133.md): Arbitrary file read in rabbitmq-aws plugin (CVSS 7.7)
- [CVE-2026-8838](https://cve.now/CVE-2026-8838.md): Remote Code Execution via eval() Injection in amazon-redshift-python-driver (CVSS 9.8)
- [CVE-2026-8597](https://cve.now/CVE-2026-8597.md): Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDK (CVSS 7.2)
- [CVE-2026-8596](https://cve.now/CVE-2026-8596.md): Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path (CVSS 7.2)
- [CVE-2026-7461](https://cve.now/CVE-2026-7461.md): OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials (CVSS 7.2)
- [CVE-2026-7426](https://cve.now/CVE-2026-7426.md): Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP (CVSS 8.1)
- [CVE-2026-7425](https://cve.now/CVE-2026-7425.md): Out-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCP (CVSS 6.5)
- [CVE-2026-7424](https://cve.now/CVE-2026-7424.md): Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP (CVSS 8.1)
- [CVE-2026-7423](https://cve.now/CVE-2026-7423.md): Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP (CVSS 5.3)
- [CVE-2026-7422](https://cve.now/CVE-2026-7422.md): MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing (CVSS 6.5)
- [CVE-2026-7191](https://cve.now/CVE-2026-7191.md): Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS (CVSS 7.2)
- [CVE-2026-6968](https://cve.now/CVE-2026-6968.md): Multiple Path Traversal Variants in awslabs/tough (CVSS 5.9)
- [CVE-2026-6967](https://cve.now/CVE-2026-6967.md): Missing Delegated Metadata Validation in awslabs/tough (CVSS 5.9)
- [CVE-2026-6966](https://cve.now/CVE-2026-6966.md): Signature Threshold Bypass in awslabs/tough Delegated Roles (CVSS 5.3)
- [CVE-2026-6912](https://cve.now/CVE-2026-6912.md): Privilege Escalation via Self-Writable Cognito Custom Attribute in AWS Ops Wheel (CVSS 8.8)
- [CVE-2026-6911](https://cve.now/CVE-2026-6911.md): Authentication Bypass via Missing JWT Signature Verification in AWS Ops Wheel (CVSS 9.8)
- [CVE-2026-6550](https://cve.now/CVE-2026-6550.md): Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python (CVSS 4.7)
- [CVE-2026-5747](https://cve.now/CVE-2026-5747.md): Out-of-bounds Write in Firecracker virtio-pci Transport (CVSS 7.5)
- [CVE-2026-5709](https://cve.now/CVE-2026-5709.md): AWS Research and Engineering Studio (RES) FileBrowser Command Injection (CVSS 8.8)
- [CVE-2026-5708](https://cve.now/CVE-2026-5708.md): Improper Control of User-Modifiable Attributes in RES CreateSession API (CVSS 8.8)
- [CVE-2026-5707](https://cve.now/CVE-2026-5707.md): Command Injection via Virtual Desktop Session Name in AWS Research and Engineering Studio (RES) (CVSS 8.8)
- [CVE-2026-5429](https://cve.now/CVE-2026-5429.md): Kiro IDE Webview Cross-Site Scripting via Workspace Color Theme (CVSS 7.8)
- [CVE-2026-5190](https://cve.now/CVE-2026-5190.md): AWS C Event Stream Streaming Decoder Stack Buffer Overflow (CVSS 7.5)
- [CVE-2026-4428](https://cve.now/CVE-2026-4428.md): CRL Distribution Point Scope Check Logic Error in AWS-LC (CVSS 7.4)
- [CVE-2026-4295](https://cve.now/CVE-2026-4295.md): Arbitrary code execution via crafted project files in Kiro IDE (CVSS 7.8)
- [CVE-2026-4269](https://cve.now/CVE-2026-4269.md): Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit (CVSS 7.5)
- [CVE-2026-4270](https://cve.now/CVE-2026-4270.md): AWS API MCP File Access Restriction Bypass (CVSS 5.5)
- [CVE-2026-3338](https://cve.now/CVE-2026-3338.md): PKCS7\_verify Signature Validation Bypass in AWS-LC (CVSS 7.5)
- [CVE-2026-3337](https://cve.now/CVE-2026-3337.md): Timing Side-Channel in AES-CCM Tag Verification in AWS-LC (CVSS 5.9)
- [CVE-2026-3336](https://cve.now/CVE-2026-3336.md): PKCS7\_verify Certificate Chain Validation Bypass in AWS-LC (CVSS 7.5)
- [CVE-2026-1778](https://cve.now/CVE-2026-1778.md): TLS disabled by default in select aws/sagemaker-python-sdk configurations (CVSS 5.9)
- [CVE-2026-1777](https://cve.now/CVE-2026-1777.md): Cleartext transmission of sensitive materials in aws/sagemaker-python-sdk (CVSS 7.2)
- [CVE-2026-1386](https://cve.now/CVE-2026-1386.md): Arbitrary Host File Overwrite via Symlink in Firecracker Jailer (CVSS 6.0)
- [CVE-2026-22611](https://cve.now/CVE-2026-22611.md): AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value (CVSS 3.7)
- [CVE-2026-0830](https://cve.now/CVE-2026-0830.md): Command Injection in Kiro GitLab Merge Request Helper (CVSS 8.4)
- [CVE-2025-14764](https://cve.now/CVE-2025-14764.md): Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introd (CVSS 5.3)
- [CVE-2025-14763](https://cve.now/CVE-2025-14763.md): Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write access to the S3 bucket to intr (CVSS 5.3)
- [CVE-2025-14762](https://cve.now/CVE-2025-14762.md): Missing cryptographic key commitment in the AWS SDK for Ruby may allow a user with write access to the S3 bucket to introduce a new EDK that (CVSS 5.3)
- [CVE-2025-14761](https://cve.now/CVE-2025-14761.md): Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that (CVSS 5.3)
- [CVE-2025-14760](https://cve.now/CVE-2025-14760.md): Missing cryptographic key commitment in the AWS SDK for C++ may allow a user with write access to the S3 bucket to introduce a new EDK that (CVSS 5.3)
- [CVE-2025-14759](https://cve.now/CVE-2025-14759.md): Missing cryptographic key commitment in the Amazon S3 Encryption Client for .NET may allow a user with write access to the S3 bucket to intr (CVSS 5.3)
- [CVE-2025-14503](https://cve.now/CVE-2025-14503.md): Overly Permissive Trust Policy in Harmonix on AWS EKS (CVSS 8.6)
- [CVE-2025-13524](https://cve.now/CVE-2025-13524.md): Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call p (CVSS 5.7)
- [CVE-2025-12967](https://cve.now/CVE-2025-12967.md): An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds\_superuser role. (CVSS 8.6)
- [CVE-2025-12815](https://cve.now/CVE-2025-12815.md): An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025. (CVSS 5.3)
- [CVE-2025-11618](https://cve.now/CVE-2025-11618.md): Invalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCP (CVSS 5.3)
- [CVE-2025-11617](https://cve.now/CVE-2025-11617.md): Buffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCP (CVSS 5.3)
- [CVE-2025-11616](https://cve.now/CVE-2025-11616.md): Buffer Over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCP (CVSS 5.3)
- [CVE-2025-11462](https://cve.now/CVE-2025-11462.md): Local Privilege Escalation Vulnerability in AWS Client VPN macOS Client (CVSS 9.3)
- [CVE-2025-8069](https://cve.now/CVE-2025-8069.md): Local Privilege Escalation Vulnerability in AWS Client VPN Windows Client (CVSS 7.3)
- [CVE-2025-3048](https://cve.now/CVE-2025-3048.md): Path Traversal in AWS SAM CLI allows file copy to local cache (CVSS 6.9)
- [CVE-2025-3047](https://cve.now/CVE-2025-3047.md): Path Traversal in AWS SAM CLI allows file copy to build container (CVSS 6.9)
- [CVE-2025-2888](https://cve.now/CVE-2025-2888.md): Improper timestamp caching during snapshot rollback in tough (CVSS 5.7)
- [CVE-2025-2887](https://cve.now/CVE-2025-2887.md): Failure to detect delegated target rollback in tough (CVSS 5.7)
- [CVE-2025-2886](https://cve.now/CVE-2025-2886.md): Terminating targets role delegations are not respected in tough (CVSS 5.7)
- [CVE-2025-2885](https://cve.now/CVE-2025-2885.md): Root metadata version not validated in tough (CVSS 5.7)
- [CVE-2025-2598](https://cve.now/CVE-2025-2598.md): AWS CDK CLI prints AWS credentials retrieved by custom credential plugins (CVSS 5.7)
- [CVE-2025-0508](https://cve.now/CVE-2025-0508.md): MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk (CVSS 5.9)
- [CVE-2025-1969](https://cve.now/CVE-2025-1969.md): Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center (CVSS 4.3)
- [CVE-2025-0851](https://cve.now/CVE-2025-0851.md): Path traversal issue in Deep Java Library (CVSS 9.3)
- [CVE-2025-0693](https://cve.now/CVE-2025-0693.md): Issue with AWS Sign-in IAM User Login Flow - Possible Username Enumeration (CVSS 5.3)
- [CVE-2025-23206](https://cve.now/CVE-2025-23206.md): IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk (CVSS 1.8)
- [CVE-2024-45037](https://cve.now/CVE-2024-45037.md): AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template (CVSS 6.4)
- [CVE-2024-32888](https://cve.now/CVE-2024-32888.md): Amazon JDBC Driver for Redshift SQL Injection via line comment generation (CVSS 10.0)
- [CVE-2024-34072](https://cve.now/CVE-2024-34072.md): Deserialization of Untrusted Data in sagemaker-python-sdk (CVSS 7.8)
- [CVE-2024-34073](https://cve.now/CVE-2024-34073.md): Command Injection in sagemaker-python-sdk (CVSS 7.8)
- [CVE-2023-51651](https://cve.now/CVE-2023-51651.md): Potential URI resolution path traversal in the AWS SDK for PHP (CVSS 6.0)
- [CVE-2023-35165](https://cve.now/CVE-2023-35165.md): AWS CDK EKS overly permissive trust policies (CVSS 6.6)
- [CVE-2022-46174](https://cve.now/CVE-2022-46174.md): Race condition during concurrent TLS mounts in efs-utils (CVSS 4.2)
- [CVE-2022-23511](https://cve.now/CVE-2022-23511.md): A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 (CVSS 7.1)
- [CVE-2022-31159](https://cve.now/CVE-2022-31159.md): Partial Path Traversal in com.amazonaws:aws-java-sdk-s3 (CVSS 7.9)
- [CVE-2022-24709](https://cve.now/CVE-2022-24709.md): Cross site scripting in @awsui/components-react (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/aws
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.