aws-parallelcluster vulnerabilities

Latest aws-parallelcluster CVEs

Newest publication first

1. CVE-2026-124033 Relative path traversal in the log export commands in AWS ParallelCluster CLI

   Published 2026-11-09

   Medium·CVSS 5.9 EPSS 0.43%

   The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a relative path traversal issue. An authenticated remote user with write access to the log export Amazon S3 bucket could use a crafted S3 object key to write files...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.