AWS vulnerabilities and fixes

CVEs that mention AWS, ranked by priority. 33 tracked.

AWS has 33 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 27. Most recent: 2026-10-23. Highest priority: CVE-2026-115812 (score 58/100).

• CVE-2026-115812 CRITICAL 9.8 Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and e
• CVE-2026-111812 CRITICAL 10.0 Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request h
• CVE-2026-18245 CRITICAL 9.0 UPGRADE Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote
• CVE-2026-115414 HIGH 7.8 OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influenc
• CVE-2026-16756 HIGH 7.5 Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serv
• CVE-2026-18140 HIGH 7.5 UPGRADE Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which
• CVE-2026-16796 HIGH 7.3 Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Pytho
• CVE-2026-18830 HIGH 8.1 Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to
• CVE-2026-112407 HIGH 8.8 Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 throu
• CVE-2026-115417 HIGH 7.5 Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0
• CVE-2026-67322 HIGH 7.5 UPGRADE GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from()
• CVE-2026-18481 HIGH 7.3 Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR #168 might allow an au
• CVE-2026-34975 HIGH 8.5 UPGRADE Plunk is an open-source email platform built on top of AWS SES
• CVE-2026-68872 MEDIUM 6.5 UPGRADE The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resol
• CVE-2026-18654 MEDIUM 6.8 UPGRADE Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and
• CVE-2026-58139 MEDIUM 6.5 The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows any database u
• CVE-2026-115416 HIGH 7.7 Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authen
• CVE-2026-115813 MEDIUM 5.8 Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and ea
• CVE-2026-12530 HIGH 7.3 Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Pytho
• CVE-2026-18953 HIGH 8.6 UPGRADE Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-tra
• CVE-2026-19642 MEDIUM 5.9 UPGRADE An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote
• CVE-2026-115845 MEDIUM 6.4 An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server
• CVE-2026-19643 MEDIUM 5.3 UPGRADE An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, mi
• CVE-2026-48035 HIGH 7.1 Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for
• CVE-2026-16584 HIGH 7.0 Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 might allow an
• CVE-2026-114655 MEDIUM 5.9 libmongocrypt builds requests to external key management services (AWS, Azure and GCP) by inserting values fro
• CVE-2026-13769 MEDIUM 5.5 UPGRADE Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where
• CVE-2026-63239 MEDIUM 5.4 A hard-coded AWS IAM credentials vulnerability in Koollab LMS allowed an attacker to access shared multi-tenan
• CVE-2026-18954 MEDIUM 5.5 UPGRADE Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.1
• CVE-2026-70447 MEDIUM 4.3 Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read p
• CVE-2026-76376 MEDIUM 4.3 In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run act
• CVE-2026-17578 LOW 2.3 Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP
• CVE-2026-86409 HIGH n/a Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication, contrary to expectations and do

FAQ

How do I fix AWS vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is AWS being exploited right now?

None of the tracked AWS CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which AWS CVE should I patch first?

CVE-2026-115812 currently ranks highest (58/100): Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and e.

← Back to latest CVEs