Aws Tough vulnerabilities

• amazon tough, tuftool +1 more Multiple Path Traversal Variants in awslabs/tough CVE-2026-6968 7.1 HighApril 24, 2026
• amazon tough, tuftool +1 more Missing Delegated Metadata Validation in awslabs/tough CVE-2026-6967 Fix available 7.1 HighApril 24, 2026
• amazon tough, tuftool +1 more Signature Threshold Bypass in awslabs/tough Delegated Roles CVE-2026-6966 Fix available 7.0 HighApril 24, 2026
• amazon tough Improper timestamp caching during snapshot rollback in tough CVE-2025-2888 Fix available 5.7 MediumMarch 27, 2025
• amazon tough Failure to detect delegated target rollback in tough CVE-2025-2887 Fix available 5.7 MediumMarch 27, 2025
• amazon tough Terminating targets role delegations are not respected in tough CVE-2025-2886 Fix available 5.7 MediumMarch 27, 2025
• amazon tough Root metadata version not validated in tough CVE-2025-2885 Fix available 5.7 MediumMarch 27, 2025
• amazon tough Improper sanitization of delegated role names in tough CVE-2021-41150 Fix available 8.2 HighOctober 19, 2021
• amazon tough Improper sanitization of target names in tough CVE-2021-41149 Fix available 8.2 HighOctober 19, 2021
• amazon tough Improper verification of signature threshold in tough CVE-2020-15093 Fix available 8.6 HighJuly 9, 2020