AWS vulnerabilities
195 CVEs and advisories name AWS as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-115416Incorrect authorization checks in Amazon Athena engine version 3 query processing
- CVE-2026-112408Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
- CVE-2026-112407Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications
- CVE-2026-110812Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune
- CVE-2026-110248Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]py
- CVE-2026-108096Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category
- CVE-2026-107783Insertion of sensitive information into log file in AWS Tools for PowerShell
- CVE-2026-107608Improper link resolution in asset bundling output handling in aws-cdk-lib
- CVE-2026-107322OS command injection in Amazon Agent Plugins for AWS databases-on-aws
- CVE-2026-107332Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code
- CVE-2026-107352Missing authorization checks in Amazon Athena engine version 3 request handling
- CVE-2026-106032Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import
- CVE-2026-105812Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import
- CVE-2026-105811Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
- CVE-2026-104019OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio
- CVE-2026-103958Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS
- CVE-2026-103957Server-side request forgery in the OAuth2 discovery handling in Loom for AWS
- CVE-2026-103956Missing authentication for critical function in Loom for AWS
- CVE-2026-104002Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
- CVE-2026-97662Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace
- CVE-2026-103505AWS EFS CSI Driver Mount Option Injection via mounttargetipmap
- CVE-2026-100308GluonTS arbitrary command execution during model deserialization
- CVE-2026-96883Type confusion in AWS pgcollection allows remote code execution
- CVE-2026-94450Potential denial of service when configured to send Retry packets in s2n-quic
- CVE-2026-92943Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python
- CVE-2026-86831Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS
- CVE-2026-86830Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
- CVE-2026-89332Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
- CVE-2026-89090Denial of service in the event stream header decoder in AWS SDK for Go v2
- CVE-2026-18061Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin