AWS Security Bulletins

CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue

CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools

CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)

CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles

CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server

CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt

CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server

CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook

CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing

PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

CVE-2026-112408 - Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications

CVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro Crew

CVE-2026-109587 & CVE-2026-109588 - Issue with FreeRTOS-Kernel

CVE-2026-102551 & CVE-2026-102552 - Issue with FreeRTOS-Plus-TCP

Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisors

CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune

CVE-2026-110310 - RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET

CVE-2026-110248 - Insertion of sensitive information into log files in Amazon SageMaker Python SDK

CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category

CVE-2026-107783 - Insertion of sensitive information into log file in AWS Tools for PowerShell

CVE-2026-107608: Improper link resolution in asset bundling output handling in aws-cdk-lib

CVE-2026-107322 - OS command injection in Amazon Agent Plugins for AWS databases-on-aws

CVE-2026-107332 - Insecure default file permissions on cached credentials in AWS Toolkit for Visual Studio Code

CVE-2026-107352 - Missing authorization checks in Amazon Athena engine version 3 request handling

CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

CVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRF

CVE-2026-104019 - OS command injection in the Studio Space startup script in Amazon SageMaker Distribution

CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS

CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver

CVE-2026-104002: Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

CVE-2026-104020 - Uncontrolled recursion in the Ion reader in Amazon Ion Python

CVE-2026-97662 - Argument injection in AWS security-agent-mcp-server diff scan

CVE-2026-100308 - GluonTS arbitrary command execution during model deserialization

CVE-2026-96883 - Type confusion in AWS pgcollection allows remote code execution

CVE-2026-94450 - Potential denial of service when configured to send Retry packets in s2n-quic

CVE-2026-94384 - Missing Authorization in AmazonConnectSalesforceLambda sfExecuteAWSService

CVE-2026-86831: Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS

CVE-2026-86830 - Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration

CVE-2026-89090 - Denial of service in the event stream header decoder in AWS SDK for Go v2

CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin

CVE-2026-89065 and CVE-2026-89066: Issue with projen - Path traversal and OS command injection

CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

CVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java Library

CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server

CVE-2026-87911

CVE-2026-85788 - Issue with awslabs mysql-mcp-server

CVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

CVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope

CVE-2026-85654 - Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server

CVE-2026-85786 - Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java

CVE-2026-85781 - Unverified access point ownership in Amazon EFS CSI Driver

CVE-2026-85656 - OS command injection in Amazon log4j-cve-2021-44228-hotpatch

CVE-2026-85028: Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

CVE-2026-85012 - OS command injection in the Amazon CodeCatalyst blueprints SDK

CVE-2026-84851- Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

CVE-2026-83551 - Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK

CVE-2026-83497 - OpenSearch SQL Plugin - Unrestricted Java Deserialization in Cursor Pagination

CVE-2026-81849 - Path traversal in the aws:downloadContent plugin in amazon-ssm-agent

CVE-2026-81838 - Zip Slip path traversal in awsdac (diagram-as-code)

CVE-2026-78379 - Consent bypass in Strands Agents Tools python_repl tool

CVE-2026-77811 - Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards

CVE-2026-77810 - Issue with Athena Federated Query Neptune Connector

Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237

CVE-2026-18420 - Remote Code Execution via Prototype Pollution in OpenSearch Dashboards TSVB Plugin

CVE-2026-75910 - Issue with Athena Federated Query Clickhouse Connector

CVE-2026-75935 and CVE-2026-75936 - Issue with Amazon ion-java - Memory-amplification denial of service

CVE-2026-75897 - Uncontrolled resource consumption in OpenSearch Dashboards capabilities route

CVE-2026-18428 - OpenSearch SQL Plugin - Async Query Validation Bypass

CVE-2026-18952 - Missing Input Validation in OpenSearch Security Analytics Plugin

CVE-2026-19642 & CVE-2026-19643 - Memory-safety issues in the Base64 decoder in the AWS SDK for C++

CVE-2026-19311- Missing Authorization in OpenSearch Alerting Plugin

CVE-2026-19111 - Insecure direct object reference in Strands Agents Tools memory tools

CVE-2026-18954 - Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server

CVE-2026-18953 - Improper limitation of a pathname in AWS Transform MCP Server

CVE-2026-18656 & CVE-2026-18657 - Issue with Kiro IDE and CLI - Executable Resolution from Untrusted Project Directory on Windows

CVE-2026-18830 - Issue with Amazon Bedrock AgentCore harness – Insufficient Input Validation

CVE-2026-18733 - Prompt injection bypasses shell tool consent gate in Strands Agents Tools

CVE-2026-18654 - Disabled SSH host key verification in AWS CLI EMR helper commands

CVE-2026-18655 - Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection

CVE-2026-18394 - Incorrect authorization in Strands Agents Tools http_request tool

CVE-2026-18481 - Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft

Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react

CVE-2026-18140 - Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers

CVE-2026-16796 - Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

CVE-2026-16756 - Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

CVE-2026-16584 - AWS API MCP Server Security Policy Bypass via Startup Failure

CVE-2026-16317 and CVE-2026-16318: Issues with s2n-tls: an open-source implementation of the TLS/SSL protocols

CVE-2026-15957 - Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes

CVE-2026-15415 - Path traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-server

CVE-2026-12283 - Issue with Athena Federated Query Synapse Connector