AWS Security Bulletins

CVE-2026-125926 - Server-side request forgery in the server registration and update API in mcp-gateway-registry

CVE-2026-100307 - Missing authorization on the external management API in mcp-gateway-registry enables privilege escalation to registry administrator

CVE-2026-124848 - Incorrect default permissions on session transcripts and prompt history in Kiro CLI

CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent

CVE-2026-125271 - AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalization

CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK

CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI

CVE-2026-119923 and CVE-2026-119924: Issues with Babelfish for Aurora PostgreSQL

CVE-2026-122193 - Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM documents in Trusted Remote Execution (REX)

CVE-2026-109518 - APT package manager that affects Ubuntu and Debian operating systems

CVE-2026-119083 - GluonTS arbitrary file write during archive extraction

CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS

CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard

CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue

CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools

CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)

CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles

CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server

CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt

CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server

CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook

CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing

PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

CVE-2026-112408 - Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications

CVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro Crew

CVE-2026-109587 & CVE-2026-109588 - Issue with FreeRTOS-Kernel

CVE-2026-102551 & CVE-2026-102552 - Issue with FreeRTOS-Plus-TCP

Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisors

CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune

CVE-2026-110310 - RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET

CVE-2026-110248 - Insertion of sensitive information into log files in Amazon SageMaker Python SDK

CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category

CVE-2026-107783 - Insertion of sensitive information into log file in AWS Tools for PowerShell

CVE-2026-107608: Improper link resolution in asset bundling output handling in aws-cdk-lib

CVE-2026-107322 - OS command injection in Amazon Agent Plugins for AWS databases-on-aws

CVE-2026-107332 - Insecure default file permissions on cached credentials in AWS Toolkit for Visual Studio Code

CVE-2026-107352 - Missing authorization checks in Amazon Athena engine version 3 request handling

CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

CVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRF

CVE-2026-104019 - OS command injection in the Studio Space startup script in Amazon SageMaker Distribution

CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS

CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver

CVE-2026-104002: Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

CVE-2026-104020 - Uncontrolled recursion in the Ion reader in Amazon Ion Python

CVE-2026-97662 - Argument injection in AWS security-agent-mcp-server diff scan

CVE-2026-100308 - GluonTS arbitrary command execution during model deserialization

CVE-2026-96883 - Type confusion in AWS pgcollection allows remote code execution

CVE-2026-94450 - Potential denial of service when configured to send Retry packets in s2n-quic

CVE-2026-94384 - Missing Authorization in AmazonConnectSalesforceLambda sfExecuteAWSService

CVE-2026-86831: Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS

CVE-2026-86830 - Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration

CVE-2026-89090 - Denial of service in the event stream header decoder in AWS SDK for Go v2

CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin

CVE-2026-89065 and CVE-2026-89066: Issue with projen - Path traversal and OS command injection

CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

CVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java Library

CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server

CVE-2026-87911

CVE-2026-85788 - Issue with awslabs mysql-mcp-server

CVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

CVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope

CVE-2026-85654 - Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server

CVE-2026-85786 - Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java

CVE-2026-85781 - Unverified access point ownership in Amazon EFS CSI Driver

CVE-2026-85656 - OS command injection in Amazon log4j-cve-2021-44228-hotpatch

CVE-2026-85028: Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

CVE-2026-85012 - OS command injection in the Amazon CodeCatalyst blueprints SDK

CVE-2026-84851- Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

CVE-2026-83551 - Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK

CVE-2026-83497 - OpenSearch SQL Plugin - Unrestricted Java Deserialization in Cursor Pagination

CVE-2026-81849 - Path traversal in the aws:downloadContent plugin in amazon-ssm-agent

CVE-2026-81838 - Zip Slip path traversal in awsdac (diagram-as-code)

CVE-2026-78379 - Consent bypass in Strands Agents Tools python_repl tool

CVE-2026-77811 - Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards

CVE-2026-77810 - Issue with Athena Federated Query Neptune Connector

Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237

CVE-2026-18420 - Remote Code Execution via Prototype Pollution in OpenSearch Dashboards TSVB Plugin

CVE-2026-75910 - Issue with Athena Federated Query Clickhouse Connector

CVE-2026-75935 and CVE-2026-75936 - Issue with Amazon ion-java - Memory-amplification denial of service

CVE-2026-75897 - Uncontrolled resource consumption in OpenSearch Dashboards capabilities route

CVE-2026-18428 - OpenSearch SQL Plugin - Async Query Validation Bypass

CVE-2026-18952 - Missing Input Validation in OpenSearch Security Analytics Plugin

CVE-2026-19642 & CVE-2026-19643 - Memory-safety issues in the Base64 decoder in the AWS SDK for C++