Skip to contentAws vulnerabilities
Newest
- amazon advanced jdbc wrapperImproper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePluginCVE-2026-180616.0 Medium
- aws projenOS command injection in the task synthesis component in projenCVE-2026-890668.4 High
- aws projenRelative path traversal in the generated file manifest cleanup component in projenCVE-2026-890656.8 Medium
- aws amazon ssm agentServer-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager AgentCVE-2026-890498.5 High
- aws security agent mcp serverMissing S3 bucket ownership verification in the AWS Security Agent MCP serverCVE-2026-879135.1 Medium
- aws security agent pluginMissing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecopsCVE-2026-879125.1 Medium
- aws labs postgres mcp serverRead-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-serverCVE-2026-879119.0 Critical
- aws labs mysql mcp serverIncomplete list of disallowed inputs in awslabs mysql-mcp-serverCVE-2026-857885.7 Medium
- opensearch dashboards, aws amazon opensearch service +1 moreStored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch DashboardsCVE-2026-849426.3 Medium
- aws aws-efs-csi-driverUnverified access point ownership in Amazon EFS CSI DriverCVE-2026-857815.1 Medium
- aws aws-fpgaCreation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development KitCVE-2026-850287.3 High
- aws @amazon-codecatalyst/blueprints.blueprintOS command injection in the Amazon CodeCatalyst blueprints SDKCVE-2026-850128.5 High
- aws sagemaker-python-sdkCleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline pathCVE-2026-835518.5 High
- opensearch, amazon opensearch service, aws amazon opensearch service +2 moreUnrestricted Java Deserialization in OpenSearch SQL Plugin Cursor PaginationCVE-2026-834978.7 High
- amazon diagram-as-codeZip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)CVE-2026-818386.8 Medium
- aws amazon opensearch service, opensearch dashboards dashboards-observability plugin +1 moreStored Cross-Site Scripting via Integration Template Asset in OpenSearch DashboardsCVE-2026-778116.2 Medium
- aws athena federated query neptune connectorCode Injection via Gremlin Query Passthrough in Amazon Athena Neptune ConnectorCVE-2026-778109.4 Critical
- opensearch dashboards, aws amazon opensearch service +1 moreRCE via Prototype Pollution in OpenSearch DashboardsCVE-2026-184208.7 High
- aws athena federated query clickhouse connector deployment templateIncorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment templateCVE-2026-759107.1 High
- opensearch dashboards, aws amazon opensearch service +1 moreUncontrolled Resource Consumption in Capabilities Route in OpenSearch DashboardsCVE-2026-758978.7 High
- aws opensearchSQL Query Validation Bypass in OpenSearch Direct QueryCVE-2026-184288.7 High
- aws aws-sdk-cpp, amazon aws software development kit +1 moreOut-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platformsCVE-2026-196436.0 Medium
- aws aws-sdk-cpp, amazon aws software development kit +1 moreOut-of-bounds write in the Base64 decoder in Amazon aws-sdk-cppCVE-2026-196426.0 Medium
- aws opensearchMissing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics PluginCVE-2026-189528.6 High
- aws opensearchMissing Authorization in Execute Monitor API in OpenSearch Alerting PluginCVE-2026-193118.6 High
- amazon strands-agents-toolsInsecure direct object reference in Strands Agents Tools memory tool namespace isolationCVE-2026-191118.6 High
- amazon documentdb mcp server, aws documentdb-mcp-server +1 moreIncorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP ServerCVE-2026-189545.7 Medium
- aws aws-transform-mcp-server, amazon aws transform mcp server +1 moreImproper limitation of a pathname to a restricted directory in aws-transform-mcp-serverCVE-2026-18953Public exploit6.3 Medium
- amazon kiro cliExecutable Resolution from Untrusted Project Directory in Kiro CLI on WindowsCVE-2026-186578.5 High
- amazon kiro ideExecutable Resolution from Untrusted Project Directory in Kiro IDE on WindowsCVE-2026-186568.5 High
- aws amazon bedrock agentcore harnessInsufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness APICVE-2026-18830Public exploit8.6 High
- amazon strands-agents-toolsPrompt injection bypasses shell tool consent gate in Strands Agents ToolsCVE-2026-187337.5 High
- amazon aws command line interface, aws aws-cli +1 moreDisabled SSH host key verification in Amazon AWS CLI EMR helper commandsCVE-2026-18654Fix available6.9 Medium
- aws amazon-mq-mcp-serverBroker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt InjectionCVE-2026-186557.1 High
- aws strands agents toolsIncorrect authorization in Strands Agents Tools http_request proxy credential exfiltrationCVE-2026-183946.9 Medium
- aws ops wheelStored XSS in Participant URL Field leads to Account Takeover via Session Token TheftCVE-2026-184816.2 Medium
- amazon aws-smithy-jsonUncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated serversCVE-2026-18140Fix available8.7 High
- amazon amplify codegen uiIncomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-reactCVE-2026-182456.4 Medium
- aws bedrock-agentcore 1.18.1Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()CVE-2026-16796Fix available8.4 High
- aws aws-smithy-http-serverAllocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of serviceCVE-2026-16756Fix available8.7 High
- aws aws-api-mcp-serverAWS API MCP Server Security Policy Bypass via Startup FailureCVE-2026-16584Fix available7.3 High
- amazon s2n-tlsQUIC Transport Parameters Memory Leak During HelloRetryRequest in s2n-tlsCVE-2026-163186.9 Medium
- aws s2n-tlsSilent Drop of TLS 1.3 Encrypted Records in s2n-tlsCVE-2026-163178.3 High
- aws aws-sdk-rustUncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapesCVE-2026-159578.7 High
- aws aws-healthomics-mcp-serverPath traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-serverCVE-2026-154156.8 Medium
- aws aws-athena-query-federationSQL injection in Amazon Athena Synapse connectorCVE-2026-122836.1 Medium
- aws bedrock-agentcoreSensitive content disclosure via OpenTelemetry spans in AgentCore Python SDKCVE-2026-157375.7 Medium
- aws jsiiOS command injection in jsii-diff in AWS jsiiCVE-2026-15895Fix available8.4 High
- aws awslabs.healthlake-mcp-serverAWS HealthLake MCP Server SSRF via Pagination URLCVE-2026-156439.2 Critical
- aws resRES Auth.GetUserPrivateKey Arbitrary File ReadCVE-2026-149047.1 High
- Show moreLoading…