Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 04:05 UTC

Critical in the last 24 hours

1602 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

154-74% vs 7-day avg of 597

2 critical, 44 high, 61 medium, 27 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Medium	5.3	CVE-2026-115845	An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code... AWSAWS MCP Server	NVD	Oct 23 19:17 UTC
CVE-2026-115845An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code... Executive summary A weakness in the Python code validator of the run_script tool in AWS MCP Server could let an authenticated user run arbitrary code inside their own isolated session. The advisory says AWS has already fixed the issue on its side and no customer action is required. Technical summary The flaw is an incomplete list of disallowed inputs in the Python code validator of the run_script sandbox, which is a validation bypass that could allow arbitrary code execution. An authenticated remote user could exploit it with a crafted script, and the advisory says the code would run only within their own isolated session environment. The advisory states the fix was applied service-side. Affected versions are given as N/A because the service is managed and exclusively hosted. No fixed version number is stated because the fix is service-side, and no CVSS score, exploitation status, or detection guidance is stated. Per the advisory, no workaround is needed if run_script is used only to run Python scripts that make AWS API calls. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Dropped extracted product not named in the source: Amazon Web Services AWS MCP Server Summarized from aws.amazon.com/security/security-bulletins/2026-149-aws Impact if exploited ConfidentialityLow IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS MCP Server NIST National Vulnerability DatabasePublished Oct 23, 2026 19:17 UTC Read the advisory
	Medium	6.9	CVE-2026-115813	Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal... AWS, Amazon Web ServicesAWS multi-model-server, Amazon Web Services Multi Model Server	NVD	Oct 23 18:17 UTC
CVE-2026-115813Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal... Executive summary Amazon Web Services Multi Model Server (MMS), an open source tool for serving machine learning models, has two issues affecting all released versions up to and including 1.1.11, and the advisory describes the one for CVE-2026-115813 as allowing the management interface to be directed to make requests to unintended network destinations. The advisory does not give a severity score, but the bulletin is labeled Important and notes that the management interface needs no authentication, so exposed deployments are at higher risk. MMS is end of life with no fixed version, so the vendor recommends migrating to a supported model-serving solution. Technical summary CVE-2026-115813 is a server-side request forgery flaw in the model download path, where the unauthenticated MMS management interface can be made to send requests to unintended network destinations. The advisory says deployments that bind the management interface to a network-accessible address are at increased risk. Affected versions are stated as <=1.1.11 (all released versions). No fixed version is available or planned, so the advisory provides no fixed version. The workaround is to bind the management interface to the loopback address when inference and management use separate ports, and to avoid passing externally supplied URLs to the model-download path; the advisory notes this is not available in SageMaker-style deployments, where management shares the inference port. The advisory does not state any detection guidance, CVSS score, or evidence of exploitation in the wild. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from aws.amazon.com/security/security-bulletins/2026-148-aws Impact if exploited ConfidentialityNone IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS Amazon Web Services AWS multi-model-server Amazon Web Services Multi Model Server NIST National Vulnerability DatabasePublished Oct 23, 2026 18:17 UTC Read the advisory
	Critical	9.3	CVE-2026-115812	Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to execute arbitrary code via a... AWS, Amazon Web ServicesAWS multi-model-server, Amazon Web Services Multi Model Server	NVD	Oct 23 18:17 UTC
CVE-2026-115812Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to execute arbitrary code via a... Executive summary Amazon Web Services Multi Model Server (MMS) versions 1.1.11 and earlier have two issues that could let an attacker run code or reach unintended network destinations. The advisory says MMS has reached end of life, no fixed version is available, and AWS recommends migrating to a supported model-serving solution. Technical summary CVE-2026-115812 is a relative path traversal in model archive extraction, letting a crafted archive write files outside the intended directory and potentially execute code with the MMS process privileges. CVE-2026-115813 is an issue in the model download path that could let the management interface make requests to unintended network destinations (server-side request forgery class). The management interface does not require authentication, and risk is increased when it is bound to a network-accessible address. Affected versions are stated as <=1.1.11 (all released versions); no fixed version is available or planned. The advisory gives workarounds: bind the management interface to loopback on separate ports and avoid passing external URLs to the download path, but notes this is not available in every configuration, such as the SageMaker-style deployment where management shares the inference port. No detection guidance or exploitation-in-the-wild status is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from aws.amazon.com/security/security-bulletins/2026-148-aws Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS Amazon Web Services AWS multi-model-server Amazon Web Services Multi Model Server NIST National Vulnerability DatabasePublished Oct 23, 2026 18:17 UTC Read the advisory
	High	8.6	CVE-2026-115419	The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation... AWS, AmazonAWS strands-agents, AWS strands-agents/sdk, Amazon Strands Agents SDK for Python, Amazon Strands Agents SDK for TypeScript, Amazon Strands Agents SDK A2A Server	NVD	Oct 22 21:17 UTC
CVE-2026-115419The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation... Executive summary Amazon's Strands Agents SDK, available for Python and TypeScript, has a flaw in its Agent2Agent server component that can let one caller see another caller's conversation data. The advisory says an authenticated user could reach other callers' conversation history or influence model behavior in multi-tenant deployments. The vendor recommends upgrading to Python version 1.43.0 or TypeScript version 1.5.0 and has no full workaround for affected versions. Technical summary The A2A server did not properly isolate conversation state between callers, which is an improper isolation or cross-session data exposure issue. An authenticated remote user could access another caller's conversation history or influence model behavior for other callers in multi-tenant deployments. Affected versions are strands-agents (Python) versions containing the multiagent.a2a module before 1.43.0, and @strands-agents/sdk (TypeScript) before 1.5.0. Fixed versions are strands-agents 1.43.0 and @strands-agents/sdk 1.5.0, where conversation state is now isolated per A2A context_id. The advisory states there is no workaround that fully addresses the issue; until upgrade, it advises not exposing an A2A server to more than one user or tenant, or running a separate server instance per user or tenant. No detection guidance or exploitation status is stated in the advisory. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from aws.amazon.com/security/security-bulletins/2026-146-aws Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS Amazon AWS strands-agents AWS strands-agents/sdk Amazon Strands Agents SDK for Python Amazon Strands Agents SDK for TypeScript Amazon Strands Agents SDK A2A Server NIST National Vulnerability DatabasePublished Oct 22, 2026 21:17 UTC Read the advisory
	High	8.2	CVE-2026-115417	Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of... AWSaws-c-mqtt, AWS IoT Device SDK for C++ v2	NVD	Oct 22 21:17 UTC
CVE-2026-115417Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of... Executive summary A memory allocation flaw in the MQTT 3.1.1 compatibility adapter of aws-c-mqtt, a messaging library distributed by AWS and bundled in the AWS IoT Device SDK for C++ v2, can let a remote party crash a client process. The advisory describes this as a denial of service issue and does not state a numeric severity score. AWS recommends upgrading to aws-c-mqtt v0.16.2 or later. Technical summary The flaw is a memory allocation with excessive size value (CWE-789) in the MQTT 3.1.1 compatibility adapter, which could let a remote actor cause a denial of service of the client process under certain conditions. Affected versions are stated as greater than or equal to 0.9.1 and less than 0.16.2. The fixed version is v0.16.2. The advisory says upgrading is the complete remediation. Workarounds given are to connect only to trusted MQTT brokers such as AWS IoT Core, to use TLS to prevent on-path tampering of broker responses, and to avoid the MQTT 3.1.1 compatibility adapter where feasible. The specific preconditions and exploitation details are not stated, and no detection guidance is provided. Whether the issue is exploited in the wild is not stated, and no CVSS score is given. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from aws.amazon.com/security/security-bulletins/2026-147-aws Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements Present Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS aws-c-mqtt AWS IoT Device SDK for C++ v2 NIST National Vulnerability DatabasePublished Oct 22, 2026 21:17 UTC Read the advisory
	High	8.4	CVE-2026-115414	OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to... AWSaws-sam-cli	NVD	Oct 22 19:17 UTC
CVE-2026-115414OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to... Executive summary A flaw in the Terraform hook of AWS SAM CLI, a tool for building serverless applications, could let an attacker run arbitrary commands on the machine performing a build. The advisory rates it as important and says it requires attention. AWS recommends upgrading to version v1.166.2 or later, and reviewing that Terraform configuration and plan files come only from trusted sources. Technical summary The flaw is an OS command injection in the Terraform hook (sam build --hook-name terraform), where a Terraform resource address is interpolated into a generated Makefile recipe without fully neutralizing shell metacharacters. An attacker who can influence the Terraform configuration or plan file consumed by a build could execute commands as the build user on the build host. Impacted versions are stated as >=1.63.0, <=1.166.1, and the fixed version is v1.166.2. The advisory's workaround is to use only trusted Terraform configuration and plan files and audit third-party modules and shared repositories, and it says upgrading is the recommended remediation. No CVSS score, exploitation status, or specific detection guidance is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from aws.amazon.com/security/security-bulletins/2026-145-aws Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Attack requirements None Privileges required None User interaction Active CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS aws-sam-cli NIST National Vulnerability DatabasePublished Oct 22, 2026 19:17 UTC Read the advisory
	Medium	6.3	CVE-2026-115416	Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account identifiers and SQL statement... AWS, AmazonAWS Amazon Athena, Amazon Athena	NVD	Oct 22 17:16 UTC
CVE-2026-115416Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account identifiers and SQL statement... Executive summary An authorization flaw in Amazon Athena engine version 3 could have let a signed-in user see AWS account identifiers and SQL statement text from other AWS accounts. AWS rates it as Important (requires attention) and says query results and data stored in Amazon S3 or other data sources were not accessible through this issue. AWS fixed the issue on October 7, 2026, and says no customer action is required. Technical summary The advisory describes incorrect authorization checks in Amazon Athena engine version 3 query processing, which is an information disclosure issue. An authenticated user could read AWS account identifiers and SQL statement text query metadata from other AWS accounts, but query results and data in Amazon S3 or other sources were not accessible. The impacted version is listed as Amazon Athena engine version 3, and AWS remediated the issue on October 7, 2026. No fixed build number or specific fixed version string is stated beyond that date, and no workarounds are available. The advisory gives no CVSS score, exploitation status, or detection guidance, and states none of these. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from aws.amazon.com/security/security-bulletins/2026-144-aws Impact if exploited ConfidentialityNone IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS Amazon AWS Amazon Athena Amazon Athena NIST National Vulnerability DatabasePublished Oct 22, 2026 17:16 UTC Read the advisory
	Critical	9.4	CVE-2026-112408	Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow... AWS, AmazonAWS Amazon SageMaker Python SDK, Amazon SageMaker Python SDK	NVD	Oct 21 20:17 UTC
CVE-2026-112408Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow... Executive summary Amazon SageMaker Python SDK, an open-source library used to train and deploy machine learning models on Amazon SageMaker, has a flaw that could let an outside party take control of a SageMaker execution environment and obtain IAM credentials. The advisory describes this as an important issue requiring attention. AWS recommends upgrading to Amazon SageMaker Python SDK 2.257.3 (V2) or 3.10.0 (V3), and says any forked or derivative code should also be patched. Technical summary The flaw is a missing verification of bucket ownership in the default_bucket() function, where the SDK uses a predictably named Amazon S3 bucket without checking that the caller's AWS account owns it. A remote actor who creates that bucket first could achieve code execution in a remote SageMaker execution environment and obtain IAM credentials. Impacted versions are V2 before 2.257.3 and V3 from 3.0.0 before 3.10.0, and the fixed versions are 2.257.3 (V2) and 3.10.0 (V3). The workaround is to explicitly pass an S3 bucket the account owns through the default_bucket parameter of sagemaker.Session or the SDK configuration file, and not to rely on the auto-generated bucket name. The advisory does not state a CVSS score, whether the issue is exploited in the wild, or any detection guidance. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from aws.amazon.com/security/security-bulletins/2026-142-aws Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements Present Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS Amazon AWS Amazon SageMaker Python SDK Amazon SageMaker Python SDK NIST National Vulnerability DatabasePublished Oct 21, 2026 20:17 UTC Read the advisory
	High	8.7	CVE-2026-112407	Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to... AWSAWS CICD-toolchain-for-serverless-applications	NVD	Oct 20 21:17 UTC
CVE-2026-112407Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to... From the advisory Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source repository to escalate privileges and access or modify resources outside the application stack in the same AWS account via application templates deployed by the toolchain pipeline. To remediate this issue, users should upgrade existing toolchain stacks to version 1.0.11 or later. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS CICD-toolchain-for-serverless-applications NIST National Vulnerability DatabasePublished Oct 20, 2026 21:17 UTC Read the advisory
	Critical	9.4	CVE-2026-110812	Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database... AWSAWS Amazon Neptune Engine	NVD	Oct 15 17:17 UTC
CVE-2026-110812Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database... From the advisory Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in auto-update should upgrade to Amazon Neptune engine version 1.5.0.0.(Backports to 1.4.8.1 and 1.4.7.1) Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS Amazon Neptune Engine NIST National Vulnerability DatabasePublished Oct 15, 2026 17:17 UTC Read the advisory
	Medium	6.0	CVE-2026-110248	Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an... AWSAWS SageMaker Python SDK	NVD	Oct 14 19:17 UTC
CVE-2026-110248Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an... From the advisory Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because the runclone_command() function does not redact credentials from subprocess error output. To remediate this issue, users should upgrade to Amazon SageMaker Python SDK V3 3.10.0 or V2 2.257.3. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements Present Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS SageMaker Python SDK NIST National Vulnerability DatabasePublished Oct 14, 2026 19:17 UTC Read the advisory
	High	7.1	CVE-2026-108096	Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote... AWSaws-amplify/graphql-index-transformer, aws-amplify/graphql-api-construct, aws-amplify/data-construct	NVD	Oct 9 18:17 UTC
CVE-2026-108096Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote... From the advisory Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries. This issue has been addressed in @aws-amplify/graphql-index-transformer 3.1.2 npmjs.com/package/@aws-amplify/graphql-…-transformer/v/3.1.2 (included in @aws-amplify/data-construct 1.17.4 npmjs.com/package/@aws-amplify/data-construct/v/1.17.4 and @aws-amplify/graphql-api-construct 1.21.4 npmjs.com/package/@aws-amplify/graphql-…i-construct/v/1.21.4 ). We recommend upgrading to the latest version ensuring any forked or derivative code is patched to incorporate the new fixes and then redeploying their backend. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS aws-amplify/graphql-index-transformer aws-amplify/graphql-api-construct aws-amplify/data-construct NIST National Vulnerability DatabasePublished Oct 9, 2026 18:17 UTC Read the advisory
	Medium	6.7	CVE-2026-107783	Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console... AWSaws-tools-for-powershell	NVD	Oct 9 16:17 UTC
CVE-2026-107783Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console... From the advisory Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later. After upgrading, review PowerShell transcripts and log stores for previously disclosed passwords and rotate any affected IAM console passwords. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Attack requirements None Privileges required Low User interaction Passive CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS aws-tools-for-powershell NIST National Vulnerability DatabasePublished Oct 9, 2026 16:17 UTC Read the advisory
	Medium	6.8	CVE-2026-107608	Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from... AWSaws-cdk-lib	NVD	Oct 8 20:17 UTC
CVE-2026-107608Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from... From the advisory Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset. To remediate this issue, users should upgrade to version 2.267.0 or later. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Attack requirements None Privileges required None User interaction Passive CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS aws-cdk-lib NIST National Vulnerability DatabasePublished Oct 8, 2026 20:17 UTC Read the advisory
	High	8.5	CVE-2026-107322	An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary... AWSAWS databases-on-aws	NVD	Oct 8 19:16 UTC
CVE-2026-107322An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary... From the advisory An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent context. To remediate this issue, users should upgrade to databases-on-aws plugin version 1.7.1 or later and verify that the updated plugin is active in each environment where it is used. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Attack requirements None Privileges required None User interaction Passive CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS databases-on-aws NIST National Vulnerability DatabasePublished Oct 8, 2026 19:16 UTC Read the advisory
	Medium	6.8	CVE-2026-107332	Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading... AWSaws-toolkit-vscode	NVD	Oct 8 18:17 UTC
CVE-2026-107332Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading... From the advisory Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS aws-toolkit-vscode NIST National Vulnerability DatabasePublished Oct 8, 2026 18:17 UTC Read the advisory
	Medium	6.3	CVE-2026-107352	Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata (AWS account identifiers... AWSAWS Amazon Athena	NVD	Oct 7 21:17 UTC
CVE-2026-107352Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata (AWS account identifiers... From the advisory Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata (AWS account identifiers and SQL statement text) from other AWS accounts. Query results, credentials, and Amazon S3 data were not affected. AWS remediated the issue on September 1, 2026, and has confirmed no customer metadata was accessed. No customer action is required. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS Amazon Athena NIST National Vulnerability DatabasePublished Oct 7, 2026 21:17 UTC Read the advisory
	Medium	5.7	CVE-2026-106032	Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an... AWSAWS bedrock-agentcore-starter-toolkit	NVD	Oct 6 21:17 UTC
CVE-2026-106032Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an... From the advisory Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated remote actor in the same AWS account to cause the environment of a user importing a Bedrock Agent to issue arbitrary outbound requests and read arbitrary local files, via crafted external reference values in the OpenAPI content associated with a Bedrock Agent action group. To remediate this issue, users should upgrade to version 0.3.14. Note that bedrock-agentcore-starter-toolkit is deprecated. The @aws/agentcore npm CLI is the supported replacement and does not contain this issue. Migration to @aws/agentcore is the recommended long-term path. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements Present Privileges required Low User interaction Active CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS bedrock-agentcore-starter-toolkit NIST National Vulnerability DatabasePublished Oct 6, 2026 21:17 UTC Read the advisory
	High	8.8	CVE-2026-105812	Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor... AWSAWS bedrock-agentcore-starter-toolkit	NVD	Oct 6 21:17 UTC
CVE-2026-105812Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor... From the advisory Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or deploys a Bedrock Agent, via crafted configuration values incorporated into generated Python source without safe literal encoding. To remediate this issue, users should upgrade to version 0.3.14. Because this issue persists into generated source, upgrading alone is not sufficient: agents imported with an affected version must be re-imported with version 0.3.14 or later and their local and deployed output artifacts replaced. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements Present Privileges required Low User interaction Active CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS bedrock-agentcore-starter-toolkit NIST National Vulnerability DatabasePublished Oct 6, 2026 21:17 UTC Read the advisory
	High	7.1	CVE-2026-105811	Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lambda-hook... AWSAWS qnabot-on-aws	NVD	Oct 6 21:17 UTC
CVE-2026-105811Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lambda-hook... From the advisory Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lambda-hook github.com/aws-solutions-library-sample…mbda_hooks/README.md ), available with QnABot on AWS versions 7.0.0 through 7.4.5, might allow an authenticated remote user to read arbitrary Amazon S3 objects in the deploying AWS account. This sample solution provides an example Lambda hook and requires separate, manual deployment and additional setup. It is not deployed automatically with QnABot. Customers who have not deployed this optional sample hook are not affected and do not need to take action. To remediate this issue, affected customers should update the QnABot on AWS stack to version 7.4.6 or later and then redeploy the Amazon Q Business Lambda hook sample stack. Updating the QnABot on AWS stack alone does not deliver the fix. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS qnabot-on-aws NIST National Vulnerability DatabasePublished Oct 6, 2026 21:17 UTC Read the advisory
	Critical	9.3	CVE-2026-104019	OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before... AWSAWS sagemaker-distribution	NVD	Oct 2 20:17 UTC
CVE-2026-104019OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before... From the advisory OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might allow an authenticated remote user with project contributor permissions to execute arbitrary commands in another project member's Studio Space and obtain that member's temporary execution role credentials via a crafted connection resource property that is interpolated into a shell invocation without neutralization. To remediate this issue, users should upgrade to version 2.14.12, 3.9.12, 4.0.11, 4.1.11, 4.2.8, 4.3.5, or 4.4.3, as applicable to the minor line in use. Users on minor lines that have reached end of support must move to a supported minor line, because no patched version will be released for those lines. In Amazon SageMaker Unified Studio, Studio Spaces adopt the latest patch of their minor line on restart once the patched images are deployed, so no version selection is required. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction Passive CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS sagemaker-distribution NIST National Vulnerability DatabasePublished Oct 2, 2026 20:17 UTC Read the advisory
	High	8.3	CVE-2026-103958	Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the... AWSAWS loom	NVD	Oct 2 19:16 UTC
CVE-2026-103958Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the... From the advisory Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafted connection address supplied when registering, updating or testing a tool server or remote agent. To remediate this issue, users should upgrade to version 1.7.0 or later. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required High User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS loom NIST National Vulnerability DatabasePublished Oct 2, 2026 19:16 UTC Read the advisory
	High	8.2	CVE-2026-103957	Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of... AWSAWS loom	NVD	Oct 2 19:16 UTC
CVE-2026-103957Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of... From the advisory Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue requests to arbitrary internal network locations, via a crafted discovery document address supplied when registering a tool server or remote agent configured for delegated authentication. To remediate this issue, users should upgrade to version 1.7.0 or later. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required High User interaction Passive CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS loom NIST National Vulnerability DatabasePublished Oct 2, 2026 19:16 UTC Read the advisory
	Critical	10.0	CVE-2026-103956	Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent... AWSAWS loom	NVD	Oct 2 19:16 UTC
CVE-2026-103956Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent... From the advisory Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role policies attached to managed agent roles, via any request to the application API in a deployment where no identity provider is configured. To remediate this issue, users should upgrade to version 1.6.1 or later. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS loom NIST National Vulnerability DatabasePublished Oct 2, 2026 19:16 UTC Read the advisory
	Medium	6.0	CVE-2026-104002	A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application... AWSAWS powertools-lambda-python	NVD	Oct 1 22:17 UTC
CVE-2026-104002A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application... From the advisory A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements Present Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects AWS AWS powertools-lambda-python NIST National Vulnerability DatabasePublished Oct 1, 2026 22:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited