PatchTheCVECVE-2026-119115: Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-private
CVE-2026-119115 is a high-severity flaw (CVSS 8.5) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow an authenticated remote user to obtain certificates, including subordinate CA certificates, signed by a cluster-scoped AWS Private CA issuer that their approval policy does not authorize. To remediate this issue, users should upgrade aws-privateca-issuer to version v1.10.1 or the AWS Private CA Con
Why this priority
- High severity
- Covered by 3 security sources
- On your watchlist
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 8.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | n/a |
| CISA exploited list | No |
| Weakness | CWE-863 |
| Published | 2026-10-29 |
| Last modified | 2026-10-29 |
Last updated 2026-10-29 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Timeline
- Published CVE record published
- Updated Record last modified
Advisories and coverage
Official advisories
- AWS Security Bulletins: CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes 2026-10-29
Research and news
- Vulners Bulletins: CVE-2026-119115 2026-10-29
- VulDB Recent Entries: CVE-2026-119115 | AWS aws-privateca-issuer up to 1.10.0 Issuer Resolution Logic issuerRef.kind improper authorization 2026-10-29
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-119115?
No fixed release is listed yet. Watch the vendor advisory and apply any mitigation shown on this page.
Is CVE-2026-119115 being exploited?
CVE-2026-119115 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-119115 affect?
CVE-2026-119115 affects affected software. Severity is high (CVSS 8.5). Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow an authenticated remote user to obtain certificates, including subordinate CA certificates,
How urgent is CVE-2026-119115?
Priority 38/100. High severity; Covered by 3 security sources; On your watchlist
Software pages
Kubernetes vulnerabilities · AWS vulnerabilities