Skip to content
Aws vulnerabilities
Newest
-
aws maplibre-gl-js-amplify
Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering
CVE-2026-121652
4.8 Medium
-
aws babelfish-for-postgresql
Babelfish for PostgreSQL Privilege Escalation
CVE-2026-119922
8.7 High
-
aws aws-serverless-mcp-server
Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
CVE-2026-116635
6.9 Medium
-
aws aidlc-traceability
Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
CVE-2026-120497
4.6 Medium
-
aws virtual-engineering-workbench
Template injection in the publishing component of awslabs Virtual Engineering Workbench
CVE-2026-119085
9.4 Critical
-
aws aws-sdk-pandas
Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
CVE-2026-119301
5.0 Medium
-
aws amazon-kinesis-producer
Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java
CVE-2026-119117
8.2 High
-
aws aws-nitro-enclaves-sdk-c
Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint
CVE-2026-119148
8.2 High
-
aws kmstool-enclave
Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c
CVE-2026-119116
8.7 High
-
aws aws-privateca-issuer
Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes
CVE-2026-119115
8.4 High
-
aws aws-sdk-pandas
Unverified ownership of the default Athena query result location in AWS SDK for pandas
CVE-2026-118029
5.9 Medium
-
aws aws-api-mcp-server
AWS API MCP Server OAuth Token Audience Validation Bypass
CVE-2026-115413
7.3 High
-
aws aws-cdk/aws-redshift-alpha
SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha
CVE-2026-115418
7.0 High
-
aws mcp server
Incomplete validation in the run_script Python sandbox in AWS MCP Server
CVE-2026-115845
5.3 Medium
-
aws multi-model-server
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server
CVE-2026-115813
6.9 Medium
-
aws multi-model-server
Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server
CVE-2026-115812
9.3 Critical
-
aws aws-c-mqtt
Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt
CVE-2026-115417
Fix available
8.2 High
-
aws strands-agents, strands-agents/sdk +1 more
Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
CVE-2026-115419
Fix available
8.6 High
-
aws aws-sam-cli
OS command injection in the Terraform hook in AWS SAM CLI
CVE-2026-115414
8.4 High
-
aws amazon athena
Incorrect authorization checks in Amazon Athena engine version 3 query processing
CVE-2026-115416
6.3 Medium
-
aws amazon sagemaker python sdk
Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
CVE-2026-112408
9.4 Critical
-
aws cicd-toolchain-for-serverless-applications
Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications
CVE-2026-112407
8.7 High
-
aws freertos-plus-tcp
Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver
CVE-2026-102552
8.2 High
-
aws freertos-plus-tcp
Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling
CVE-2026-102551
9.2 Critical
-
aws amazon neptune engine
Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune
CVE-2026-110812
9.4 Critical
-
aws sagemaker python sdk
Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]py
CVE-2026-110248
6.0 Medium
-
aws aws-amplify/data-construct, aws-amplify/graphql-api-construct, aws-amplify/graphql-index-transformer +2 more
Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category
CVE-2026-108096
7.1 High
-
aws aws-tools-for-powershell
Insertion of sensitive information into log file in AWS Tools for PowerShell
CVE-2026-107783
6.7 Medium
-
aws aws-cdk-lib
Improper link resolution in asset bundling output handling in aws-cdk-lib
CVE-2026-107608
6.8 Medium
-
aws databases-on-aws
OS command injection in Amazon Agent Plugins for AWS databases-on-aws
CVE-2026-107322
8.5 High
-
aws aws-toolkit-vscode
Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code
CVE-2026-107332
6.8 Medium
-
aws amazon athena
Missing authorization checks in Amazon Athena engine version 3 request handling
CVE-2026-107352
6.3 Medium
-
aws bedrock-agentcore-starter-toolkit
Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import
CVE-2026-106032
5.7 Medium
-
aws bedrock-agentcore-starter-toolkit
Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import
CVE-2026-105812
8.8 High
-
aws qnabot-on-aws
Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
CVE-2026-105811
7.1 High
-
aws sagemaker-distribution
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio
CVE-2026-104019
9.3 Critical
-
aws loom
Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS
CVE-2026-103958
8.3 High
-
aws loom
Server-side request forgery in the OAuth2 discovery handling in Loom for AWS
CVE-2026-103957
8.2 High
-
aws loom
Missing authentication for critical function in Loom for AWS
CVE-2026-103956
Public exploit
10.0 Critical
-
aws powertools-lambda-python
Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
CVE-2026-104002
6.0 Medium
-
aws security-agent-mcp-server
Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace
CVE-2026-97662
6.9 Medium
-
aws aws-efs-csi-driver
AWS EFS CSI Driver Mount Option Injection via mounttargetipmap
CVE-2026-103505
6.9 Medium
-
aws gluonts
GluonTS arbitrary command execution during model deserialization
CVE-2026-100308
8.4 High
-
aws pgcollection
Type confusion in AWS pgcollection allows remote code execution
CVE-2026-96883
8.7 High
-
amazon kiro ide
Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces
CVE-2026-95985
8.6 High
-
aws s2n-quic
Potential denial of service when configured to send Retry packets in s2n-quic
CVE-2026-94450
8.7 High
-
aws awsiotpythonsdk
Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python
CVE-2026-92943
9.2 Critical
-
aws aws-network-policy-agent, amazon-vpc-cni-k8s +1 more
Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS
CVE-2026-86831
8.7 High
-
aws iam-identity-center-team
Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
CVE-2026-86830
8.6 High
-
amazon kiro ide
Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
CVE-2026-89332
6.7 Medium
- Show olderLoading…