redhat/awscli vulnerabilities

Latest redhat/awscli CVEs

Newest publication first

1. CVE-2026-18654 Disabled SSH host key verification in Amazon AWS CLI EMR helper commands

   Published 2026-08-03

   Medium·CVSS 6.9

   Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR clust...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.