Amazon Ssm Agent vulnerabilities

2 known vulnerabilities in Amazon Ssm Agent from Amazon. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  amazon-ssm-agent: Relative Path Traversal

  CVE-2026-81849Aug 28, 2026Amazon

  Improper limitation of a pathname to a restricted directory in the aws:downloadContent plugin in amazon-ssm-agent before 3.3.4515.0 might allow an authenticated remote user whose ssm:SendCommand permission is restricted to the AWS-DownloadContent document, to

• 7.0 High severity

  Amazon Ssm Agent: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2022-29527Apr 20, 2022Amazon

  Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.