CVEs published by AMZN

CVEs published by AMZN (CVE Numbering Authority). 29 tracked.

• CVE-2026-18481 HIGH 7.3 Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR #168 might allow an au
• CVE-2026-18394 HIGH 7.4 Incorrect authorization in the http_request tool in Strands Agents Tools before 0.8.2 might allow remote attac
• CVE-2026-18245 CRITICAL 9.0 UPGRADE Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote
• CVE-2025-11573 HIGH 7.5 An infinite loop issue in Amazon.IonDotnet library versions <v1.3.2 may allow a threat actor to cause a denial
• CVE-2026-18140 HIGH 7.5 UPGRADE Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which
• CVE-2026-18733 HIGH 8.8 A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow rem
• CVE-2026-18830 HIGH 8.1 Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to
• CVE-2026-19111 HIGH 8.1 Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon
• CVE-2026-18654 MEDIUM 6.8 UPGRADE Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and
• CVE-2026-18655 MEDIUM 6.5 Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server
• CVE-2026-18953 HIGH 8.6 UPGRADE Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-tra
• CVE-2026-18657 HIGH 7.8 UPGRADE An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthen
• CVE-2026-18656 HIGH 7.8 UPGRADE An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthe
• CVE-2026-18954 MEDIUM 5.5 UPGRADE Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.1
• CVE-2026-115812 CRITICAL 9.8 Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and e
• CVE-2026-115813 MEDIUM 5.8 Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and ea
• CVE-2026-115845 MEDIUM 6.4 An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server
• CVE-2026-19642 MEDIUM 5.9 UPGRADE An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote
• CVE-2026-19643 MEDIUM 5.3 UPGRADE An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, mi
• CVE-2026-13769 MEDIUM 5.5 UPGRADE Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where
• CVE-2026-115414 HIGH 7.8 OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influenc
• CVE-2026-115417 HIGH 7.5 Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0
• CVE-2026-115419 HIGH 8.1 The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK f
• CVE-2026-75935 HIGH 7.5 Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow re
• CVE-2026-75936 HIGH 7.5 Improper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-java before 1
• CVE-2026-112380 CRITICAL 9.9 Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of
• CVE-2026-115416 HIGH 7.7 Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authen
• CVE-2026-112407 HIGH 8.8 Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 throu
• CVE-2026-112408 HIGH 8.1 Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker

← Back to latest CVEs