CVEs we hold for Aws

Records whose assigning authority named Aws as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-97662Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation…AWS security-agent-mcp-server

CVE-2026-96883Type confusion in AWS pgcollection allows remote code executionAWS pgcollection

CVE-2026-94450Potential denial of service when configured to send Retry packets in s2n-quicAWS s2n-quic

CVE-2026-92943Improper validation of certificate with host mismatch in AWS IoT Device SDK for PythonAWS AWSIoTPythonSDK

CVE-2026-9291Insecure Deserialization in Amazon Braket SDK Job Results ProcessingAWS Amazon Braket Python SDK

CVE-2026-9255Tool Execution Without Authorization via Piped Stdin in Kiro CLIAWS Kiro CLI

CVE-2026-9133Arbitrary file read in rabbitmq-aws pluginAWS

CVE-2026-89332Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace ConfigurationAWS Kiro IDE

CVE-2026-89090Denial of service in the event stream header decoder in AWS SDK for Go v2AWS SDK for Go v2

CVE-2026-89066OS command injection in the task synthesis component in projenAWS projen

CVE-2026-89065Relative path traversal in the generated file manifest cleanup component in projenAWS projen

CVE-2026-89049Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager AgentAWS Amazon SSM Agent

CVE-2026-8838Remote Code Execution via eval() Injection in amazon-redshift-python-driverAWS Amazon Redshift connector for Python

CVE-2026-87913Missing S3 bucket ownership verification in the AWS Security Agent MCP serverAWS Security Agent MCP server

CVE-2026-87912Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecopsAWS Security Agent plugin

CVE-2026-87911Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon…AWS Labs postgres MCP Server

CVE-2026-86831Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKSaws-network-policy-agent; AWS amazon-vpc-cni-k8s

CVE-2026-86830Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity CenterAWS iam-identity-center-team

CVE-2026-85788Incomplete list of disallowed inputs in awslabs mysql-mcp-serverAWS Labs MySQL MCP Server

CVE-2026-85781Unverified access point ownership in Amazon EFS CSI Driveraws-efs-csi-driver

CVE-2026-85028Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kitaws-fpga

CVE-2026-85012OS command injection in the Amazon CodeCatalyst blueprints SDKAWS @amazon-codecatalyst/blueprints.blueprint

CVE-2026-84942Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch DashboardsAWS Amazon OpenSearch Service; OpenSearch Dashboards

CVE-2026-83551Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline pathAWS sagemaker-python-sdk

CVE-2026-81838Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)aws diagram-as-code

CVE-2026-77811Stored Cross-Site Scripting via Integration Template Asset in OpenSearch DashboardsAWS Amazon OpenSearch Service; OpenSearch Dashboards…

CVE-2026-77810Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune ConnectorAWS Athena Federated Query Neptune Connector

CVE-2026-75910Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment templateAWS Athena Federated Query Clickhouse Connector deployment…

CVE-2026-7461OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume CredentialsAWS Amazon ECS Agent

CVE-2026-7426Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCPAWS FreeRTOS-Plus-TCP

CVE-2026-7425Out-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCPAWS FreeRTOS-Plus-TCP

CVE-2026-7424Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCPAWS FreeRTOS-Plus-TCP

CVE-2026-7423Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCPAWS FreeRTOS-Plus-TCP

CVE-2026-7422MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet ProcessingAWS FreeRTOS-Plus-TCP

CVE-2026-7191Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWSAWS

CVE-2026-6968Multiple Path Traversal Variants in awslabs/toughAWS tuftool

CVE-2026-6967Missing Delegated Metadata Validation in awslabs/toughAWS tuftool

CVE-2026-6966Signature Threshold Bypass in awslabs/tough Delegated RolesAWS tuftool

CVE-2026-6912Privilege Escalation via Self-Writable Cognito Custom Attribute in AWS Ops WheelAWS Ops Wheel

CVE-2026-6911Authentication Bypass via Missing JWT Signature Verification in AWS Ops WheelAWS Ops Wheel

CVE-2026-6550Key commitment policy bypass via shared key cache in AWS Encryption SDK for PythonAWS Encryption SDK for Python

CVE-2026-5747Out-of-bounds Write in Firecracker virtio-pci TransportAWS Firecracker

CVE-2026-5709AWS Research and Engineering Studio (RES) FileBrowser Command InjectionAWS Research and Engineering Studio (RES)

CVE-2026-5708Improper Control of User-Modifiable Attributes in RES CreateSession APIAWS Research and Engineering Studio (RES)

CVE-2026-5707Command Injection via Virtual Desktop Session Name in AWS Research and Engineering Studio (RES)AWS Research and Engineering Studio (RES)

CVE-2026-5429Kiro IDE Webview Cross-Site Scripting via Workspace Color ThemeAWS Kiro IDE

CVE-2026-5190AWS C Event Stream Streaming Decoder Stack Buffer Overflowaws-c-event-stream

CVE-2026-5059aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerabilityaws-mcp-server

CVE-2026-5058aws-mcp-server Command Injection Remote Code Execution Vulnerabilityaws-mcp-server

CVE-2026-44308Spring Cloud AWS: Missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notificationsawspring spring-cloud-aws; io.awspring.cloud…

CVE-2026-4428CRL Distribution Point Scope Check Logic Error in AWS-LCAWS-LC; AWS-LC-FIPS

CVE-2026-4295Arbitrary code execution via crafted project files in Kiro IDEAWS Kiro IDE

CVE-2026-4270AWS API MCP File Access Restriction BypassAWS API MCP Server

CVE-2026-4269Improper S3 ownership verification in Bedrock AgentCore Starter ToolkitAWS Bedrock AgentCore Starter Toolkit

CVE-2026-3338PKCS7_verify Signature Validation Bypass in AWS-LCAWS-LC

CVE-2026-3337Timing Side-Channel in AES-CCM Tag Verification in AWS-LCAWS-LC; AWS-LC-FIPS

CVE-2026-3336PKCS7_verify Certificate Chain Validation Bypass in AWS-LCAWS-LC

CVE-2026-22611AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter valueaws-sdk-net

CVE-2026-19643Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platformsaws-sdk-cpp

CVE-2026-19642Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cppaws-sdk-cpp

CVE-2026-19311Missing Authorization in Execute Monitor API in OpenSearch Alerting PluginAWS OpenSearch; Github OpenSearch

CVE-2026-19111Insecure direct object reference in Strands Agents Tools memory tool namespace isolationAWS strands-agents-tools

CVE-2026-18954Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP ServerAWS documentdb-mcp-server

CVE-2026-18953Improper limitation of a pathname to a restricted directory in aws-transform-mcp-serveraws-transform-mcp-server

CVE-2026-18952Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics PluginAWS Opensearch; Github Opensearch

CVE-2026-18830Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness APIAWS Amazon Bedrock AgentCore harness

CVE-2026-18733Prompt injection bypasses shell tool consent gate in Strands Agents ToolsAWS strands-agents-tools

CVE-2026-18655Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt InjectionAWS amazon-mq-mcp-server

CVE-2026-18654Disabled SSH host key verification in Amazon AWS CLI EMR helper commandsaws-cli

CVE-2026-18558Embed Any Document <= 2.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'embeddoc' Shortcodeawsmin Embed Any Document – Embed PDF, Word, PowerPoint and…

CVE-2026-18481Stored XSS in Participant URL Field leads to Account Takeover via Session Token TheftAWS Ops Wheel

CVE-2026-18428SQL Query Validation Bypass in OpenSearch Direct QueryAWS Opensearch; Github Opensearch

CVE-2026-18420RCE via Prototype Pollution in OpenSearch DashboardsAWS Amazon OpenSearch Service; OpenSearch Dashboards

CVE-2026-18394Incorrect authorization in Strands Agents Tools http_request proxy credential exfiltrationAWS Strands Agents Tools

CVE-2026-18245Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-reactAWS Amplify Codegen UI

CVE-2026-18140Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in…aws-smithy-json

CVE-2026-18061Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePluginAWS Advanced JDBC Wrapper

CVE-2026-1778TLS disabled by default in select aws/sagemaker-python-sdk configurationsAWS SageMaker Python SDK

CVE-2026-1777Cleartext transmission of sensitive materials in aws/sagemaker-python-sdkAWS SageMaker Python SDK

CVE-2026-16796Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()AWS bedrock-agentcore 1.18.1

CVE-2026-16756Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated…aws-smithy-http-server

CVE-2026-16584AWS API MCP Server Security Policy Bypass via Startup Failureaws-api-mcp-server

CVE-2026-16317Silent Drop of TLS 1.3 Encrypted Records in s2n-tlsAWS s2n-tls

CVE-2026-15957Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of…aws-sdk-rust

CVE-2026-15895OS command injection in jsii-diff in AWS jsiiAWS jsii

CVE-2026-15737Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDKAWS bedrock-agentcore

CVE-2026-15643AWS HealthLake MCP Server SSRF via Pagination URLAWS awslabs.healthlake-mcp-server

CVE-2026-15415Path traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-serveraws-healthomics-mcp-server

CVE-2026-14904RES Auth.GetUserPrivateKey Arbitrary File ReadAWS res

CVE-2026-14471Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registryAWS MCP Gateway & Registry

CVE-2026-14265RCE via Deserialization in AWS Advanced JDBC WrapperAWS Advanced JDBC Wrapper

CVE-2026-1386Arbitrary Host File Overwrite via Symlink in Firecracker JailerAWS Firecracker

CVE-2026-13769Overly permissive File Permissions in AWS CLIAWS CLI

CVE-2026-13763HTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAFAWS Application Load Balancer

CVE-2026-13762HTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAFAWS Amazon CloudFront

CVE-2026-13760OS Command Injection in aws-cdk-lib Docker BundlingAWS CDK

CVE-2026-12530Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()AWS bedrock-agentcore

CVE-2026-12283SQL injection in Amazon Athena Synapse connectoraws-athena-query-federation

CVE-2026-12043Heap double-free in AWS Common Runtime aws-c-httpaws-c-http

CVE-2026-11931Insecure Permissions on Authentication Token Cache File in Kiro IDEAWS Kiro IDE

CVE-2026-11417OS Command Injection in NodejsFunction Bundling in aws-cdk-libAWS Cloud Development Kit library

CVE-2026-11401Privilege Escalation in AWS Advanced Go Wrapper for Amazon Aurora PostgreSQLAWS Advanced Go Wrapper

CVE-2026-11400Privilege Escalation in AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQLAWS Advanced JDBC Wrapper

CVE-2026-11393Code injection via improper triple-quote escaping in AgentCore CLI Bedrock Agent importAWS AgentCore CLI

CVE-2026-110812Deserialization of untrusted data in the Gremlin graph-import path in Amazon NeptuneAWS Amazon Neptune Engine

CVE-2026-110248Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]pyAWS SageMaker Python SDK

CVE-2026-108096Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Categoryaws-amplify/graphql-index-transformer…

CVE-2026-107783Insertion of sensitive information into log file in AWS Tools for PowerShellaws-tools-for-powershell

CVE-2026-107608Improper link resolution in asset bundling output handling in aws-cdk-libaws-cdk-lib

CVE-2026-10740Excessive memory allocation in s2n-quicAWS s2n-quic

CVE-2026-107352Missing authorization checks in Amazon Athena engine version 3 request handlingAWS Amazon Athena

CVE-2026-107332Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Codeaws-toolkit-vscode

CVE-2026-107322OS command injection in Amazon Agent Plugins for AWS databases-on-awsaws databases-on-aws

CVE-2026-106032Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock…aws bedrock-agentcore-starter-toolkit

CVE-2026-10591Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive PathsAWS Kiro IDE

CVE-2026-10584HTTPS Fallback to HTTP in Graph ExplorerAWS Graph Explorer

CVE-2026-105812Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit…aws bedrock-agentcore-starter-toolkit

CVE-2026-105811Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWSaws qnabot-on-aws

CVE-2026-104019OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on…AWS sagemaker-distribution

CVE-2026-104002Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)AWS powertools-lambda-python

CVE-2026-103958Server-side request forgery in the tool server and remote agent connection handling in Loom for AWSAWS loom

CVE-2026-103957Server-side request forgery in the OAuth2 discovery handling in Loom for AWSAWS loom

CVE-2026-103956Missing authentication for critical function in Loom for AWSAWS loom

CVE-2026-103505AWS EFS CSI Driver Mount Option Injection via mounttargetipmapaws-efs-csi-driver

CVE-2026-100308GluonTS arbitrary command execution during model deserializationAWS gluonts

CVE-2026-0830Command Injection in Kiro GitLab Merge Request HelperAWS Kiro IDE

CVE-2025-8391Magic Edge – Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via height Parameterawssoft Magic Edge – Lite

CVE-2025-8069Local Privilege Escalation Vulnerability in AWS Client VPN Windows ClientAWS Client VPN

CVE-2025-60099WordPress Embed Any Document Plugin <= 2.7.7 - Cross Site Scripting (XSS) Vulnerabilityawsm.in Embed Any Document

CVE-2025-3048Path Traversal in AWS SAM CLI allows file copy to local cacheAWS Serverless Application Model Command Line Interface

CVE-2025-3047Path Traversal in AWS SAM CLI allows file copy to build containerAWS Serverless Application Model Command Line Interface

CVE-2025-2888Improper timestamp caching during snapshot rollback in toughAWS tough

CVE-2025-2887Failure to detect delegated target rollback in toughAWS tough

CVE-2025-2886Terminating targets role delegations are not respected in toughAWS tough

CVE-2025-2885Root metadata version not validated in toughAWS tough

CVE-2025-27016WordPress Drivr Lite – Google Drive Plugin plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerabilityawsm.in Drivr Lite – Google Drive Plugin

CVE-2025-2598AWS CDK CLI prints AWS credentials retrieved by custom credential pluginsAWS Cloud Development Kit Command Line Interface

CVE-2025-23206IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdkaws-cdk

CVE-2025-1969Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity CenterAWS IAM Identity Center

CVE-2025-14764no title heldAWS S3 Encryption Client for Go

CVE-2025-14763no title heldAWS S3 Encryption Client for Java

CVE-2025-14762no title heldAWS SDK for Ruby

CVE-2025-14761no title heldAWS SDK for PHP

CVE-2025-14760no title heldAWS SDK for C++

CVE-2025-14759no title heldAWS S3 Encryption Client for .NET

CVE-2025-14503Overly Permissive Trust Policy in Harmonix on AWS EKSAWS

CVE-2025-13524no title heldAWS Wickr Enterprise

CVE-2025-12967no title heldAWS ODBC driver

CVE-2025-12885Embed Any Document <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scriptingawsmin Embed Any Document – Embed PDF, Word, PowerPoint and…

CVE-2025-12815no title heldAWS Research and Engineering Studio (RES)

CVE-2025-11618Invalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCPAWS FreeRTOS-Plus-TCP

CVE-2025-11617Buffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCPAWS FreeRTOS-Plus-TCP

CVE-2025-11616Buffer Over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCPAWS FreeRTOS-Plus_TCP

CVE-2025-11462Local Privilege Escalation Vulnerability in AWS Client VPN macOS ClientAWS Client VPN

CVE-2025-1043Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files <= 2.7.5 - Authenticated (Contributor+) Blind…awsmin Embed Any Document – Embed PDF, Word, PowerPoint and…

CVE-2025-0851Path traversal issue in Deep Java LibraryAWS DeepJavaLibrary

CVE-2025-0693Issue with AWS Sign-in IAM User Login Flow - Possible Username EnumerationAWS Sign-in IAM Login Flow

CVE-2025-0508MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdkaws/sagemaker-python-sdk

CVE-2024-45037AWS CDK RestApi not generating authorizationScope correctly in resultant CFN templateaws-cdk

CVE-2024-37454WordPress AWSM Team – Team Showcase Plugin plugin <= 1.3.1 - Local File Inclusion vulnerabilityAWSM Team

CVE-2024-37293aws-deployment-framework's potential risk can lead to privilege escalationawslabs aws-deployment-framework

CVE-2024-34073Command Injection in sagemaker-python-sdkaws sagemaker-python-sdk

CVE-2024-34072Deserialization of Untrusted Data in sagemaker-python-sdkaws sagemaker-python-sdk

CVE-2024-32888Amazon JDBC Driver for Redshift SQL Injection via line comment generationaws amazon-redshift-jdbc-driver

CVE-2023-51651Potential URI resolution path traversal in the AWS SDK for PHPaws-sdk-php

CVE-2023-51386Sandbox Accounts for Events vulnerable to privilege escalation to read running events dataawslabs sandbox-accounts-for-events

CVE-2023-50928sandbox-accounts-for-events security misconfiguration leads to budget exceedawslabs sandbox-accounts-for-events

CVE-2023-45061WordPress WP Job Openings plugin <= 3.4.1 - Broken Access Control vulnerabilityawsm.in WP Job Openings

CVE-2023-36467AWS data.all vulnerable to RCE through user injection of Python Commandsawslabs aws-dataall

CVE-2023-35165AWS CDK EKS overly permissive trust policiesaws-cdk

CVE-2023-30610AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sendingawslabs aws-sdk-rust

CVE-2023-23707WordPress Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files Plugin <= 2.7.1 is vulnerable to Cross Site…Awsm Innovations Embed Any Document – Embed PDF, Word…

CVE-2022-4725AWS SDK XML Parser XpathUtils.java XpathUtils server-side request forgeryn/a AWS SDK

CVE-2022-46174Race condition during concurrent TLS mounts in efs-utilsaws efs-utils

CVE-2022-39230Security issue in fhir-works-on-aws-authz-smartawslabs fhir-works-on-aws-authz-smart

CVE-2022-31159Partial Path Traversal in com.amazonaws:aws-java-sdk-s3aws-sdk-java

CVE-2022-24709Cross site scripting in @awsui/components-reactaws awsui-documentation

CVE-2022-23511no title heldaws amazon-cloudwatch-agent

CVE-2021-43811Code injection via unsafe YAML loadingawslabs sockeye

CVE-2021-41150Improper sanitization of delegated role names in toughawslabs tough

CVE-2021-41149Improper sanitization of target names in toughawslabs tough

CVE-2020-25636no title heldAWS Community Community Collections

CVE-2020-25635no title heldAWS Community Community Collections

CVE-2020-15093Improper verification of signature threshold in toughawslabs tough

CVE-2019-10777no title heldn/a aws-lambda

185 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.