Snapshot 256783
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to main content AWS Cloud Security Security Services Use Cases Compliance Data Protection Blog Partners Resources Security Bulletins Subscribe to the RSS Feed The Security Bulletin RSS feed only holds our posts in last 30 days. As new bulletins go live, older ones drop off. If you are missing older content, you can always find our complete, permanent archive directly on our website. We investigate all reported security vulnerabilities affecting Amazon and AWS services, software, and products. To support our customers in prioritizing and addressing known issues, we publish Security Bulletins filtered by the following criteria: Important Bulletins require attention (e.g. impact assessment, mitigation) Informational Bulletins are shared for awareness Latest Bulletins Displaying 1-8 (9) 2026-11-10 2026-178-AWS CVE-2026-124848 - Incorrect default permissions on session transcripts and prompt history in Kiro CLI See details 2026-11-10 2026-177-AWS CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent See details 2026-11-10 2026-176-AWS CVE-2026-125271 - AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalization See details 2026-11-09 2026-175-AWS CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK See details 2026-11-09 2026-174-AWS CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI See details 2026-11-06 2026-166-AWS CVE-2026-119923 and CVE-2026-119924: Issues with Babelfish for Aurora PostgreSQL See details 2026-11-06 2026-173-AWS CVE-2026-122193 - Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM documents in Trusted Remote Execution (REX) See details 2026-11-05 2026-172-AWS CVE-2026-109518 - APT package manager that affects Ubuntu and Debian operating systems See details CVE-2026-119083 - GluonTS arbitrary file write during archive extraction See details Found something suspicious? Learn about our practice for addressing potential vulnerabilities in any aspect of our cloud services. Report suspicious emails Notify us of any suspicious em Report vulnerabilities AWS investigates all reported