Amazon Web Services in October 2026: incidents, uptime and changes

Incidents 2

CVEs published

• CVE-2026-103505 AWS EFS CSI Driver Mount Option Injection via mounttargetipmap (CVSS 6.5)
• CVE-2026-97662 Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace (CVSS 8.2)
• CVE-2026-104020 Uncontrolled recursion in the Ion reader in Amazon Ion Python (CVSS 7.5)
• CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python) (CVSS 5.3)
• CVE-2026-103956 Missing authentication for critical function in Loom for AWS (CVSS 10.0)
• CVE-2026-103957 Server-side request forgery in the OAuth2 discovery handling in Loom for AWS (CVSS 6.2)
• CVE-2026-103958 Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS (CVSS 7.6)
• CVE-2026-104019 OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio (CVSS 9.0)
• CVE-2026-105811 Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS (CVSS 6.5)
• CVE-2026-105812 Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import (CVSS 9.0)
• CVE-2026-106032 Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import (CVSS 5.7)
• CVE-2026-107352 Missing authorization checks in Amazon Athena engine version 3 request handling (CVSS 7.7)
• CVE-2026-107332 Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code (CVSS 5.5)
• CVE-2026-107322 OS command injection in Amazon Agent Plugins for AWS databases-on-aws (CVSS 7.8)
• CVE-2026-107608 Improper link resolution in asset bundling output handling in aws-cdk-lib (CVSS 5.5)
• CVE-2026-107783 Insertion of sensitive information into log file in AWS Tools for PowerShell (CVSS 5.9)
• CVE-2026-108096 Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category (CVSS 6.5)
• CVE-2026-110248 Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]py (CVSS 5.3)
• CVE-2026-110310 RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET (CVSS 5.3)
• CVE-2026-98432 ipv4: free inet_opt and ireq_opt after an RCU grace period (CVSS 9.8)
• CVE-2026-99999 ipv4: validate checksum_start before completing checksum (CVSS 9.3)
• CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune (CVSS 9.9)
• CVE-2026-109587 Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel (CVSS 8.8)
• CVE-2026-109588 Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel (CVSS 8.8)
• CVE-2026-102551 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling (CVSS 7.7)
• CVE-2026-102552 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver (CVSS 5.9)
• CVE-2026-112380 Missing authorization in the WhatsApp channel in Kiro Crew (CVSS 9.9)
• CVE-2026-112407 Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications (CVSS 8.8)
• CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509 (CVSS 6.8)
• CVE-2026-109618 RCE via OOM corruption (CVSS 9.8, CISA KEV)
• CVE-2026-109619 RCE via stale global state (CVSS 8.1, CISA KEV)
• CVE-2026-112408 Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket() (CVSS 8.1)
• CVE-2026-111497 Out-of-Bounds Write in Google Brotli Decoder (CVSS 9.8, CISA KEV)
• CVE-2026-115416 Incorrect authorization checks in Amazon Athena engine version 3 query processing (CVSS 7.7)
• CVE-2026-115414 OS command injection in the Terraform hook in AWS SAM CLI (CVSS 7.8)
• CVE-2026-115419 Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server (CVSS 8.1)
• CVE-2026-115417 Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt (CVSS 7.5)
• CVE-2026-115812 Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server (CVSS 9.8)
• CVE-2026-115813 Server-side request forgery in the model download path in Amazon Web Services Multi Model Server (CVSS 5.8)
• CVE-2026-115845 Incomplete validation in the run_script Python sandbox in AWS MCP Server (CVSS 6.4)
• CVE-2026-115418 SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha (CVSS 7.3)
• CVE-2026-115413 AWS API MCP Server OAuth Token Audience Validation Bypass (CVSS 7.8)
• CVE-2026-118029 Unverified ownership of the default Athena query result location in AWS SDK for pandas (CVSS 5.9)
• CVE-2026-115415 Secret masking bypass in the environment tool in Strands Agents Tools (CVSS 6.5)
• CVE-2026-119115 Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes (CVSS 8.5)
• CVE-2026-119116 Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c (CVSS 7.8)
• CVE-2026-119148 Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint (CVSS 6.5)
• CVE-2026-119086 Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel (CVSS 6.5)
• CVE-2026-119117 Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java (CVSS 6.5)