AWS vulnerabilities
195 CVEs and advisories name AWS as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-89066OS command injection in the task synthesis component in projen
- CVE-2026-89065Relative path traversal in the generated file manifest cleanup component in projen
- CVE-2026-89049Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
- CVE-2026-87913Missing S3 bucket ownership verification in the AWS Security Agent MCP server
- CVE-2026-87912Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops
- CVE-2026-87911Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server
- CVE-2026-85788Incomplete list of disallowed inputs in awslabs mysql-mcp-server
- CVE-2026-84942Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards
- CVE-2026-85781Unverified access point ownership in Amazon EFS CSI Driver
- CVE-2026-85028Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit
- CVE-2026-85012OS command injection in the Amazon CodeCatalyst blueprints SDK
- CVE-2026-83551Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path
- CVE-2026-81838Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)
- CVE-2026-77811Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
- CVE-2026-77810Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector
- CVE-2026-18420RCE via Prototype Pollution in OpenSearch Dashboards
- CVE-2026-75910Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template
- CVE-2026-75897Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards
- CVE-2026-18428SQL Query Validation Bypass in OpenSearch Direct Query
- CVE-2026-19643Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platforms
- CVE-2026-19642Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cpp
- CVE-2026-18952Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin
- CVE-2026-19311Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin
- CVE-2026-19111Insecure direct object reference in Strands Agents Tools memory tool namespace isolation
- CVE-2026-18954Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server
- CVE-2026-18953Improper limitation of a pathname to a restricted directory in aws-transform-mcp-server
- CVE-2026-18830Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API
- CVE-2026-18733Prompt injection bypasses shell tool consent gate in Strands Agents Tools
- CVE-2026-18654Disabled SSH host key verification in Amazon AWS CLI EMR helper commands
- CVE-2026-18655Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection