https://vulnogram.org/ Most recent CVEs assigned by Amazon (amzn). https://vulnogram.org/seaview/icons/amzn.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-112407 https://vulnogram.org/CVE-2026-112407 Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source repository to escalate privileges and access or modif… High Tue, 20 Oct 2026 20:34:40 GMT https://vulnogram.org/CVE-2026-112380 https://vulnogram.org/CVE-2026-112380 Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kir… Critical Tue, 20 Oct 2026 20:05:28 GMT https://vulnogram.org/CVE-2026-102552 https://vulnogram.org/CVE-2026-102552 Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply. To remediate th… High Network Exploitable Fri, 16 Oct 2026 17:28:47 GMT https://vulnogram.org/CVE-2026-102551 https://vulnogram.org/CVE-2026-102551 Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and ad… Critical Network Exploitable Fri, 16 Oct 2026 17:27:38 GMT https://vulnogram.org/CVE-2026-109588 https://vulnogram.org/CVE-2026-109588 Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enabled builds to… Critical Fri, 16 Oct 2026 17:09:51 GMT https://vulnogram.org/CVE-2026-109587 https://vulnogram.org/CVE-2026-109587 Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kernel memory outside the regions assigned to it, via… Critical Fri, 16 Oct 2026 17:08:07 GMT https://vulnogram.org/CVE-2026-110812 https://vulnogram.org/CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To r… Critical Thu, 15 Oct 2026 16:34:03 GMT https://vulnogram.org/CVE-2026-110310 https://vulnogram.org/CVE-2026-110310 A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5. Since this padding scheme is susceptible to the well-known Bleichenbach… Medium Wed, 14 Oct 2026 19:37:48 GMT https://vulnogram.org/CVE-2026-110248 https://vulnogram.org/CVE-2026-110248 Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatc… Medium Wed, 14 Oct 2026 18:34:16 GMT https://vulnogram.org/CVE-2026-108096 https://vulnogram.org/CVE-2026-108096 Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via craft… High Fri, 09 Oct 2026 18:10:24 GMT https://vulnogram.org/CVE-2026-107783 https://vulnogram.org/CVE-2026-107783 Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, use… Medium Fri, 09 Oct 2026 15:38:20 GMT https://vulnogram.org/CVE-2026-107608 https://vulnogram.org/CVE-2026-107608 Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset. To remediate this issu… Medium Thu, 08 Oct 2026 19:36:53 GMT https://vulnogram.org/CVE-2026-107322 https://vulnogram.org/CVE-2026-107322 An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted databa… High Thu, 08 Oct 2026 18:39:27 GMT https://vulnogram.org/CVE-2026-107332 https://vulnogram.org/CVE-2026-107332 Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgr… Medium Thu, 08 Oct 2026 17:33:30 GMT https://vulnogram.org/CVE-2026-107352 https://vulnogram.org/CVE-2026-107352 Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata (AWS account identifiers and SQL statement text) from other AWS accounts. Query results, credentia… High Cloud Hosted Wed, 07 Oct 2026 20:14:30 GMT https://vulnogram.org/CVE-2026-106032 https://vulnogram.org/CVE-2026-106032 Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated remote actor in the same AWS account to cause the environment of a u… Medium Tue, 06 Oct 2026 20:34:54 GMT https://vulnogram.org/CVE-2026-105812 https://vulnogram.org/CVE-2026-105812 Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or deploys a Bedroc… Critical Tue, 06 Oct 2026 20:34:08 GMT https://vulnogram.org/CVE-2026-105811 https://vulnogram.org/CVE-2026-105811 Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lambda-hook https://github.com/aws-solutions-library-samples/qnabot-on-aws/blob/main/source/docs/lambda_hooks/README.md ), available… High Tue, 06 Oct 2026 20:03:31 GMT https://vulnogram.org/CVE-2026-104019 https://vulnogram.org/CVE-2026-104019 OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as us… Critical Fri, 02 Oct 2026 20:08:10 GMT https://vulnogram.org/CVE-2026-103958 https://vulnogram.org/CVE-2026-103958 Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arb… High Fri, 02 Oct 2026 19:07:30 GMT https://vulnogram.org/CVE-2026-103957 https://vulnogram.org/CVE-2026-103957 Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue requests to arbitrar… High Fri, 02 Oct 2026 19:06:52 GMT https://vulnogram.org/CVE-2026-103956 https://vulnogram.org/CVE-2026-103956 Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integrat… Critical Network Exploitable Fri, 02 Oct 2026 19:06:06 GMT https://vulnogram.org/CVE-2026-104002 https://vulnogram.org/CVE-2026-104002 A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3… Medium Thu, 01 Oct 2026 21:05:55 GMT https://vulnogram.org/CVE-2026-104020 https://vulnogram.org/CVE-2026-104020 Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remediate… High Network Exploitable Thu, 01 Oct 2026 20:36:33 GMT https://vulnogram.org/CVE-2026-97662 https://vulnogram.org/CVE-2026-97662 An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace dire… High Thu, 01 Oct 2026 17:34:03 GMT https://vulnogram.org/CVE-2026-103505 https://vulnogram.org/CVE-2026-103505 Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mou… Medium Thu, 01 Oct 2026 15:36:04 GMT https://vulnogram.org/CVE-2026-100308 https://vulnogram.org/CVE-2026-100308 Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialize… High Tue, 29 Sep 2026 15:05:53 GMT https://vulnogram.org/CVE-2026-96883 https://vulnogram.org/CVE-2026-96883 pgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated remote user to execute arbitrary code as the postgres operating system user via crafted SQL statements… High Thu, 24 Sep 2026 19:05:49 GMT https://vulnogram.org/CVE-2026-95985 https://vulnogram.org/CVE-2026-95985 The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending an… High Network Exploitable Thu, 24 Sep 2026 17:07:47 GMT https://vulnogram.org/CVE-2026-94450 https://vulnogram.org/CVE-2026-94450 Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of service by shutting down a server endpoint via a single crafted UDP datagram. Only server endpoin… High Network Exploitable Tue, 22 Sep 2026 20:04:44 GMT https://vulnogram.org/CVE-2026-94384 https://vulnogram.org/CVE-2026-94384 Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is… High Tue, 22 Sep 2026 17:07:12 GMT https://vulnogram.org/CVE-2026-92943 https://vulnogram.org/CVE-2026-92943 Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core en… Critical Network Exploitable Thu, 17 Sep 2026 19:14:56 GMT https://vulnogram.org/CVE-2026-86831 https://vulnogram.org/CVE-2026-86831 Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass NetworkPolicy enforcement on co-located pods in other namespaces via craf… High Wed, 16 Sep 2026 19:49:49 GMT https://vulnogram.org/CVE-2026-86830 https://vulnogram.org/CVE-2026-86830 Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitra… High Mon, 14 Sep 2026 18:00:41 GMT https://vulnogram.org/CVE-2026-89332 https://vulnogram.org/CVE-2026-89332 Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repositor… Medium Fri, 11 Sep 2026 19:03:37 GMT https://vulnogram.org/CVE-2026-89090 https://vulnogram.org/CVE-2026-89090 An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame contain… High Network Exploitable Fri, 11 Sep 2026 17:03:33 GMT https://vulnogram.org/CVE-2026-18061 https://vulnogram.org/CVE-2026-18061 Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 might allow an actor with write access to the shared cache infrastructure to disclose sensitive files from applicati… Medium Fri, 11 Sep 2026 16:33:01 GMT https://vulnogram.org/CVE-2026-89066 https://vulnogram.org/CVE-2026-89066 Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runn… High Fri, 11 Sep 2026 16:05:42 GMT https://vulnogram.org/CVE-2026-89065 https://vulnogram.org/CVE-2026-89065 Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the environment… High Fri, 11 Sep 2026 16:05:04 GMT https://vulnogram.org/CVE-2026-89049 https://vulnogram.org/CVE-2026-89049 A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent (SSM Agent) before 3.3.4851.0 on all platforms might allow a… Critical Thu, 10 Sep 2026 18:34:48 GMT https://vulnogram.org/CVE-2026-85228 https://vulnogram.org/CVE-2026-85228 An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denia… Critical Network Exploitable Thu, 10 Sep 2026 17:03:48 GMT https://vulnogram.org/CVE-2026-87913 https://vulnogram.org/CVE-2026-87913 A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in… Medium Network Exploitable Thu, 10 Sep 2026 15:43:11 GMT https://vulnogram.org/CVE-2026-87912 https://vulnogram.org/CVE-2026-87912 A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastruc… Medium Network Exploitable Thu, 10 Sep 2026 15:42:11 GMT https://vulnogram.org/CVE-2026-87911 https://vulnogram.org/CVE-2026-87911 An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed P… Critical Network Exploitable Wed, 09 Sep 2026 19:35:46 GMT https://vulnogram.org/CVE-2026-85788 https://vulnogram.org/CVE-2026-85788 Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQL inline co… Medium Wed, 09 Sep 2026 16:24:59 GMT https://vulnogram.org/CVE-2026-84942 https://vulnogram.org/CVE-2026-84942 Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by… High Tue, 08 Sep 2026 19:41:25 GMT https://vulnogram.org/CVE-2026-85787 https://vulnogram.org/CVE-2026-85787 An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content… High Network Exploitable Fri, 04 Sep 2026 20:03:58 GMT https://vulnogram.org/CVE-2026-85786 https://vulnogram.org/CVE-2026-85786 Improper handling of highly compressed data in Amazon ion-java before 1.12.1 might allow remote attackers to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon decompression due to insuffici… High Network Exploitable Fri, 04 Sep 2026 19:19:32 GMT https://vulnogram.org/CVE-2026-85781 https://vulnogram.org/CVE-2026-85781 Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directori… High Fri, 04 Sep 2026 18:49:53 GMT https://vulnogram.org/CVE-2026-85656 https://vulnogram.org/CVE-2026-85656 An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline cha… High Fri, 04 Sep 2026 17:33:20 GMT