AWS vulnerabilities
We track 118 vulnerabilities in AWS products across 60+ products. 118 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
Latest AWS vulnerabilities
- 8.0 High severity
AWS Advanced JDBC Wrapper: Untrusted Search Path
An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rds_superuser,
- 8.8 High severity
Kiro IDE: Incorrect Permission Assignment for Critical Resource
Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to execute arbitrary commands via crafted instructions that cause writes to execution-sensitive paths (such as .vsc
- 7.1 High severity
Amazon Braket Python SDK: Deserialization of Untrusted Data
Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job res
- 7.8 High severity
Kiro CLI: Missing Authorization
Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to execute arbitrary tools, including shell commands, without user approval by crafting content that is piped to kiro-cli via stdin. We recommend
- 7.7 High severity
RabbitMQ AWS: Active Debug Code
Active debug code exists in the ARN resolver of amazon-mq rabbitmq-aws before version 0.2.1. A debug ARN scheme (arn:aws-debug:file) accepted by the PUT /api/aws/arn/validate validation endpoint might allow remote authenticated users to perform arbitrary file
- 9.8 Critical severity
Amazon Redshift connector for Python: Improper Control of Generation of Code
Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. To remediate this issue, users should upg
- 7.2 High severity
Amazon SageMaker Python SDK: Improper Validation of Integrity Check Value
Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to achieve code execution in inference containers via replacement of model artifacts
- 7.2 High severity
Amazon SageMaker Python SDK: Cleartext Storage of Sensitive Information
Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon SageMaker Python SDK before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to extract the HMAC signing key from SageMaker API responses and forge v
- 7.2 High severity
Amazon ECS Agent: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allow a remote authenticated threat actor to execute shell commands with SYSTEM privile
- 8.1 High severity
FreeRTOS-Plus-TCP: Out-of-bounds Write
Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by sending a crafted Router Advertisement with a prefix length
- 8.1 High severity
FreeRTOS-Plus-TCP: Integer Underflow (Wrap or Wraparound)
Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address assignment, DNS configuration, and lease times, and to cause a denial of service (permanent IP
- 7.2 High severity
QnABot on AWS: Improper Control of Generation of Code
Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context by injecting a crafted condition
- 8.8 High severity
AWS Ops Wheel: Improperly Controlled Modification of Dynamically-Determined Object Attributes
Improperly controlled modification of dynamically-determined object attributes in the Cognito User Pool configuration in AWS Ops Wheel before PR #165 allows remote authenticated users to escalate to deployment admin privileges and manage Cognito user accounts
- 9.8 Critical severity
AWS Ops Wheel: Improper Verification of Cryptographic Signature
Missing JWT signature verification in AWS Ops Wheel allows unauthenticated attackers to forge JWT tokens and gain unintended administrative access to the application, including the ability to read, modify, and delete all application data across tenants and man
- 7.5 High severity
Firecracker: Divide By Zero
An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x86_64 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the
- 8.8 High severity
Research and Engineering Studio (RES): Improper Neutralization of Special Elements used in an OS Command
Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands on the cluster-manager EC2 instance via crafted input when using the
- 8.8 High severity
Research and Engineering Studio (RES): Improperly Controlled Modification of Dynamically-Determined Object Attributes
Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow an authenticated remote user to escalate privileges, assume the virtual desktop host instance
- 8.8 High severity
Research and Engineering Studio (RES): Improper Neutralization of Special Elements used in an OS Command
Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual deskto
- 7.8 High severity
Kiro IDE: Improper Neutralization of Input During Web Page Generation
Unsanitized input during web page generation in the Kiro Agent webview in Kiro IDE before version 0.8.140 allows a remote unauthenticated threat actor to execute arbitrary code via a potentially damaging crafted color theme name when a local user opens the wor
- 7.5 High severity
aws-c-event-stream: Out-of-bounds Write
Out-of-bounds write in the streaming decoder component in aws-c-event-stream before 0.6.0 might allow a third party operating a server to cause memory corruption leading to arbitrary code execution on a client application that processes crafted event-stream me
- 7.4 High severity
AWS-LC: Improper Check for Certificate Revocation
A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks. To remediate this issue, users should upg
- 7.8 High severity
Kiro IDE: Inclusion of Functionality from Untrusted Control Sphere
Improper trust boundary enforcement in Kiro IDE before version 0.8.0 on all supported platforms might allow a remote unauthenticated threat actor to execute arbitrary code via maliciously crafted project directory files that bypass workspace trust protections
- 7.5 High severity
Bedrock AgentCore Starter Toolkit: Unverified Ownership
A missing S3 ownership verification in the Bedrock AgentCore Starter Toolkit before version v0.1.13 may allow a remote actor to inject code during the build process, leading to code execution in the AgentCore Runtime. This issue only affects users of the Bedro
- 7.5 High severity
AWS-LC: Improper Verification of Cryptographic Signature
Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes. Customers of AWS services do not need to take action. Applications using AWS-
- 7.5 High severity
AWS-LC: Improper Certificate Validation
Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except the final signer. Customers of AWS services do not need to take acti
- 7.2 High severity
SageMaker Python SDK: Cleartext Transmission of Sensitive Information
The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext response elements of the DescribeTrainingJob function. A third party with permissions to both call this API and permissions to modify objects
- 7.8 High severity
Kiro IDE: Improper Neutralization of Special Elements used in an OS Command
Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge-Request helper in Kiro IDE before version 0.6.18 when opening maliciously crafted workspaces. To mitigate, users should update to the lates
- 7.2 High severity
Harmonix on AWS: Incorrect Privilege Assignment
An overly-permissive IAM trust policy in the Harmonix on AWS framework may allow IAM principals in the same AWS account to escalate privileges via role assumption. The sample code for the EKS environment provisioning role is configured to trust the account roo
- 8.0 High severity
JDBC Wrapper: Use of Externally-Controlled Input to Select Classes or Code
An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service
- 7.8 High severity
Client VPN: Improper Link Resolution Before File Access
Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a no
- 7.8 High severity
Client VPN: Incorrect Default Permissions
During the AWS Client VPN client installation on Windows devices, the install process references the C:\usr\local\windows-x86_64-openssl-localbuild\ssl directory location to fetch the OpenSSL configuration file. As a result, a non-admin user could place arbitr
- 9.8 Critical severity
DeepJavaLibrary: Absolute Path Traversal
A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.
- 8.1 High severity
aws-cdk: Improper Verification of Cryptographic Signature
The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints as
- 10.0 Critical severity
amazon-redshift-jdbc-driver: Improper Neutralization of Special Elements used in an SQL Command
The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces (APIs) available in the Java Platform, Enterprise Editions. Prior to version 2.1.0.28, SQL injection is pos
- 7.8 High severity
sagemaker-python-sdk: Improper Neutralization of Special Elements used in an OS Command
sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. In affected versions the capture_dependencies function in `sagemaker.serve.save_retrive.version_1_0_0.save.utils` module allows for potentially unsafe Ope
- 7.8 High severity
sagemaker-python-sdk: Deserialization of Untrusted Data
sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. The sagemaker.base_deserializers.NumpyDeserializer module before v2.218.0 allows potentially unsafe deserialization when untrusted data is passed as pickl
- 9.8 Critical severity
amplify_cli: Incorrect Default Permissions
Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "Effect":"Allow" remains
- 8.8 High severity
aws-cdk: Incorrect Authorization
AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages `aws-cdk-lib` 2.0.0 until 2.80.0 and `@aws-cdk/aws-eks` 1.57.0 until 1.202.