Amazon vulnerabilities

Products

• freertos 18
• amazon web services freertos 14
• fire os 13
• opensearch 10
• blink xt2 sync module firmware 7
• Amazon Athena ODBC driver 6
• data.all 5
• payfort-php-sdk 5
• amazon web services internet of things device software development kit v2 4
• aws software development kit 4
• Amazon Aurora PostgreSQL with Babelfish 3
• amazon web services aws-c-io 3
• aws client vpn 3
• firecracker 3
• strands-agents-tools 3
• tough 3
• Workspaces 3
• Amazon Redshift JDBC Driver 2
• audible 2
• aws encryption sdk 2
• aws s3 crypto sdk 2
• awslabs sandbox accounts for events 2
• echo dot firmware 2
• Fire TV Stick 3rd gen 2
• ion-c 2
• kindle firmware 2
• kindle for pc 2
• kindle touch 2
• Kiro CLI 2
• Kiro IDE 2

Latest Amazon CVEs

Newest publication first · page 1 of 8

1. CVE-2026-124848 Incorrect default permissions on session transcripts and prompt history in Kiro CLI

   Published 2026-11-10

   Medium·CVSS 6.8

   Incorrect default file permissions in Kiro CLI (formerly Amazon Q Developer CLI) before version 2.27.0 on macOS and Linux might allow other local users on the same host to read a user's session transcripts and prompt history, including any credentials or source code they contain....

2. CVE-2026-124035 Unsafe reflection in Amazon Braket Schemas error mitigation validation

   Published 2026-11-09

   High·CVSS 7.5

   Unsafe reflection in the error mitigation schema validation in Amazon Braket Schemas before 1.32.2 might allow a remote authenticated user with S3 write access to the quantum task output location to execute arbitrary code on any machine that retrieves the quantum task results via...

3. CVE-2026-119924 Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser

   Published 2026-11-06

   High·CVSS 7.2

   An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent process memory or cau...

4. CVE-2026-119923 Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser

   Published 2026-11-06

   Critical·CVSS 9.3

   A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS commands as the database pr...

5. CVE-2026-119922 Babelfish for PostgreSQL Privilege Escalation

   Published 2026-11-03

   High·CVSS 8.7

   Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend users up...

6. CVE-2026-115415 Secret masking bypass in the environment tool in Strands Agents Tools

   Published 2026-10-28

   Medium·CVSS 5.9

   Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and API keys, via a crafted prompt that disabl...

7. CVE-2026-112380 Missing authorization in the WhatsApp channel in Kiro Crew

   Published 2026-10-20

   Critical·CVSS 9.0

   Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kiro Crew via messages sent to th...

8. CVE-2026-110310 RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET

   Published 2026-10-14

   Medium·CVSS 6.0

   A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5. Since this padding scheme is susceptible to the well-known Bleichenbacher attack, the user can use a...

9. CVE-2026-104020 Uncontrolled recursion in the Ion reader in Amazon Ion Python

   Published 2026-10-01

   High·CVSS 8.7 EPSS 0.44%

   Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remediate this issue, users should upgra...

10. CVE-2026-95985 Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces

    Published 2026-09-24

    High·CVSS 8.6 EPSS 0.14%

    The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message can cause agent modi...

11. CVE-2026-94384 Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda

    Published 2026-09-22

    Medium·CVSS 6.4

    Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitly denied, via invocat...

12. CVE-2023-32803 ca-certificates: ca-certificates: Failure to remove TrustCor root certificates

    Published 2026-09-14

    High·CVSS 7.5

    The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491.

13. CVE-2026-85228 Integer overflow in tensor buffer validation in Deep Java Library

    Published 2026-09-10

    High·CVSS 8.8

    An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of service via a crafted ten...

14. CVE-2026-85787 An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-server

    Published 2026-09-04

    High·CVSS 7.1

    An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an auth...

15. CVE-2026-85786 Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java

    Published 2026-09-04

    High·CVSS 8.7

    Improper handling of highly compressed data in Amazon ion-java before 1.12.1 might allow remote attackers to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon decompression due to insufficient coverage of the GZIP auto-...

16. CVE-2026-85656 OS command injection in Amazon log4j-cve-2021-44228-hotpatch

    Published 2026-09-04

    High·CVSS 8.5

    An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters.

17. CVE-2026-85654 Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server

    Published 2026-09-04

    High·CVSS 7.1

    Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, inde...

18. CVE-2026-84851 Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

    Published 2026-09-02

    High·CVSS 8.7

    An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service.

19. CVE-2026-83497 Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination

    Published 2026-08-31

    High·CVSS 8.7

    Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissions to execute arbitrary code on the server by sending a crafted cursor parameter to the plugins/sql en...

20. CVE-2026-81849 Path traversal in the aws:downloadContent plugin in amazon-ssm-agent

    Published 2026-08-28

    High·CVSS 8.7

    Improper limitation of a pathname to a restricted directory in the aws:downloadContent plugin in amazon-ssm-agent before 3.3.4515.0 might allow an authenticated remote user whose ssm:SendCommand permission is restricted to the AWS-DownloadContent document, to write arbitrary file...

21. CVE-2026-78379 Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools

    Published 2026-08-25

    Critical·CVSS 9.2

    Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards non_i...

22. CVE-2026-18657 Executable Resolution from Untrusted Project Directory in Kiro CLI on Windows

    Published 2026-08-04

    High·CVSS 8.5

    An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user s...

23. CVE-2026-18656 Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows

    Published 2026-08-04

    High·CVSS 8.5

    An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user...

24. CVE-2026-16318 QUIC Transport Parameters Memory Leak During HelloRetryRequest in s2n-tls

    Published 2026-07-21

    Medium·CVSS 6.9

    The QUIC transport parameters extension handler in s2n-tls incorrectly uses s2n_alloc instead of s2n_realloc to store the peer's transport parameters. When a TLS 1.3 connection goes through a HelloRetryRequest, the handler is called twice on the same connection. On the second cal...

25. CVE-2026-15746 Credential disclosure in Strands Agents Tools elasticsearch_memory tool

    Published 2026-07-15

    Medium·CVSS 6.9

    Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provides pre-built tools for use with the SDK, including the elasticsearch_memory tool for agent memory storage. We identified CVE-2026-15746, a server-side request fo...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.