AWS vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-115413 Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations withHigh 7.3 · Oct 27, 2026
• CVE-2026-115418 SQL injection in the database-query custom resource handlers in the Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha module befHigh 7 · Oct 26, 2026
• CVE-2026-115812 Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to execute arbitrCritical 9.3 · Oct 23, 2026
• CVE-2026-115419 The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolaHigh 8.6 · Oct 22, 2026
• CVE-2026-115417 Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denialHigh 8.2 · Oct 22, 2026
• CVE-2026-115414 OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumeHigh 8.4 · Oct 22, 2026
• CVE-2026-112408 Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3Critical 9.4 · Oct 21, 2026
• CVE-2026-112407 Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with pHigh 8.7 · Oct 20, 2026
• CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard daCritical 9.4 · Oct 15, 2026
• CVE-2026-108096 Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenHigh 7.1 · Oct 9, 2026
• CVE-2026-107322 An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execuHigh 8.5 · Oct 8, 2026
• CVE-2026-105812 Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated samHigh 8.8 · Oct 6, 2026
• CVE-2026-105811 Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lambda-hook https://github.com/aws-solutionHigh 7.1 · Oct 6, 2026
• CVE-2026-104019 OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, Critical 9.3 · Oct 2, 2026
• CVE-2026-103958 Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtHigh 8.3 · Oct 2, 2026
• CVE-2026-103957 Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token ofHigh 8.2 · Oct 2, 2026
• CVE-2026-103956 Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authorityCritical 10 · Oct 2, 2026
• CVE-2026-100308 Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary opHigh 8.4 · Sep 29, 2026
• CVE-2026-96883 pgcollection is an open source extension to PostgreSQL.High 8.7 · Sep 24, 2026
• CVE-2026-94450 Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of serviceHigh 8.7 · Sep 22, 2026
• CVE-2026-92943 Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7Critical 9.2 · Sep 17, 2026
• CVE-2026-86831 Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remotHigh 8.7 · Sep 16, 2026
• CVE-2026-86830 Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticHigh 8.6 · Sep 14, 2026
• CVE-2026-89090 An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terHigh 8.2 · Sep 11, 2026
• CVE-2026-89066 Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackeHigh 8.4 · Sep 11, 2026