CVE-2026-115812 AWS CVE debrief

Who should care

Defenders and security teams using or planning to use AWS Multi Model Server 1.1.11 and earlier should assess their exposure and plan migration to a supported model serving solution. IT and development teams responsible for model serving infrastructure should prioritize this vulnerability for remediation.

Why it matters

CVE-2026-115812 is a critical vulnerability in AWS Multi Model Server 1.1.11 and earlier, allowing potential remote code execution via a crafted model archive. The software has reached end-of-life, and no fixed version is available. Defenders should assess exposure and prioritize migration to a supported model serving solution.

• Potential remote code execution via crafted model archives.
• Critical severity with a CVSS score of 9.3.
• End-of-life software with no available fixed version.
• Need for immediate migration to a supported model serving solution.

Technical summary

CVE-2026-115812 is a critical vulnerability in AWS Multi Model Server 1.1.11 and earlier. The vulnerability allows potential remote code execution via a crafted model archive due to a relative path traversal during model archive extraction. The CVSS score is 9.3, indicating critical severity. The Multi Model Server has reached end-of-life, and no fixed version is available. Affected users should immediately assess their exposure and plan migration to a supported model serving solution. The official CVE record and NVD entry provide details on the vulnerability.

Defensive priority

High priority remediation is recommended due to the critical severity of this vulnerability. Affected users should immediately assess their exposure and plan migration to a supported model serving solution.

Recommended defensive actions

• Immediately assess exposure to CVE-2026-115812 in your environment.
• Discontinue use of AWS Multi Model Server 1.1.11 and earlier.
• Migrate to a supported model serving solution as soon as possible.
• Review and update inventory to ensure no affected systems are in use.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

CVE-2026-115812 is a critical vulnerability in AWS Multi Model Server 1.1.11 and earlier, allowing potential remote code execution via a crafted model archive due to a relative path traversal during model archive extraction. Evidence is limited regarding specific exploitation or impact. The vendor, Amazon, has provided a security bulletin reference. Defenders should verify affected scope and severity using the official CVE record and NVD entry.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.