These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated remote user to execute arbitrary code as the postgres operating system user via crafted SQL statements. The issue is addressed in version 2.1.2 or later. Users should assess exposure, prioritize upgrading, and monitor for potential exploitation attempts. This high-severity vulnerability requires immediate attention [truncated]
CVE-2026-89090 is a high-severity vulnerability in the Amazon AWS SDK for Go v2, potentially allowing an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame. The issue was patched in release-2026-03-23 or later. This vulnerability affects applications using the Amazon AWS SDK for Go v2 before the patched release, particularly those handling [truncated]
CVE-2026-18061 debrief based on the supplied source corpus. The RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 has improper restriction of XML external entity references, potentially allowing disclosure of sensitive files from application hosts that read cached query results. This could lead to exposure of stored database and IAM role credentials. Defenders and administrators shou [truncated]
CVE-2026-89066 is a high-severity vulnerability in the projen project, with a CVSS score of 8.4. The vulnerability is caused by improper neutralization of special elements used in an OS command in the task synthesis component. This could allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via shell metacharacters in project configurat [truncated]
A relative path traversal vulnerability in projen before 0.101.37 could allow context-dependent attackers to delete files and directories outside the project directory. This issue arises from the generated file manifest cleanup component. Users should upgrade to version 0.101.37 to remediate this issue. The corrected containment check is automatically applied by the projen runtime next time it is run, ens [truncated]
The @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 stores sensitive information in cleartext, potentially allowing an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid integrity signatures for specially crafted function payloads. This could lead to code execution in another user [truncated]
The Neptune connector vulnerability, tracked as CVE-2026-77810, is a critical security issue that allows users with access to Neptune through Athena Federated Query to gain unauthorized access to properties in the Lambda supplying the compute for the connector. This vulnerability has a CVSS score of 9.4 and requires immediate attention. The affected product is the Neptune connector, and the vulnerability [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-06T22:16:55.410Z and has not been modified since then. The NVD entry is currently Received. CVE-2026-19111 is an insecure direct object reference vulnerability in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon Strands Agents Tools before version 0.8.3. The issue might allo [truncated]
The CVE-2026-18245 vulnerability relates to improper control of code generation in Amazon Amplify Codegen Ui versions prior to 2.20.6. This issue might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and server-side rendering contexts via crafted Studio component or theme schema values. Users of Amazon Amplify Codegen Ui should be a [truncated]
CVE-2026-16317 is a validation issue in s2n-tls that allows an active man-in-the-middle to silently discard individual application data records without either endpoint detecting the modification. This issue affects all TLS 1.3 connections, impacting both TLS clients and servers. The vulnerability stems from the AEAD implementation hardcoding the outer content_type value in the additional authenticated dat [truncated]
A high-severity vulnerability was found in Smithy-RS, a Rust code generation and runtime framework used for generating HTTP clients and servers from Smithy interface definitions. This issue is caused by uncontrolled recursion in JSON, CBOR, and XML deserializer functions, which could allow remote attackers to cause a denial of service via stack exhaustion. The vulnerability affects users of the AWS SDK fo [truncated]
AWS HealthOmics is a HIPAA-eligible service managing infrastructure for bioinformatics analyses. A path traversal issue in the linting tools of the AWS HealthOmics MCP Server before version 0.0.36 might allow an actor to write content to arbitrary locations outside the intended workflow bundle directory. This issue has a CVSS score of 6.8 and a severity of MEDIUM. The vulnerability is caused by improper l [truncated]
Amazon Athena Query Federation's Synapse connector has a SQL injection vulnerability due to improper neutralization of special elements used in SQL commands. This issue affects versions v2022.20.1 through v2026.19.1. An authenticated remote user could exploit this by crafting a table name to execute injected read-only SQL queries, potentially returning unintended data from the connected database. The CVSS [truncated]
The AWS Bedrock AgentCore Python SDK, an open-source library for building AI agents on Amazon Bedrock AgentCore, had a vulnerability in versions 1.4.8 and 1.5.0. The OpenTelemetry instrumentation unintentionally logged sensitive user content, including raw user prompts and complete agent responses, without filtering or masking. These logs were written to span attributes and flowed into the customer's aws/ [truncated]
CVE-2026-14904 is an improper link resolution before file access issue in AWS Research and Engineering Studio (RES). An authenticated remote user could read arbitrary files on the cluster-manager EC2 instance by replacing their SSH private key file with a symbolic link targeting any file on the host. This vulnerability allows access to any file readable by root, including other users' SSH private keys and [truncated]
CVE-2026-14471 Improper Neutralization of Special Elements in metrics-service retention policy management component in Amazon mcp-gateway-registry before 1.0.13 might allow an authenticated remote user to execute arbitrary SQL queries via a crafted table_name value that is interpolated into SQL statements in identifier position. This vulnerability has a high CVSS score of 8.6 and is considered a high prio [truncated]
The CVE record for CVE-2026-14265 was published on 2026-07-01T20:17:08.087Z and has not been modified since then. The NVD entry is currently Analyzed. This vulnerability affects Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0, specifically the RemoteQueryCachePlugin, which uses ObjectInputStream without class filtering when deserializing cached query results from Redis or Valkey. This al [truncated]
CVE-2026-12530 is an improper neutralization of argument delimiters vulnerability in the install_packages() method of AWS Bedrock AgentCore Python SDK versions >= 1.1.3 and < 1.6.1. This might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. Users of affected versions should be aware of this vulnerability and take steps [truncated]
CVE-2026-11931 is a medium-severity vulnerability affecting Kiro IDE on macOS and Linux before version 0.11.133. The vulnerability is caused by incorrect default permissions, which expose the authentication token cache file to other local users or processes. The cache file has world-readable permissions (0644) instead of owner-restricted permissions (0600).
CVE-2026-11417 is a HIGH-severity vulnerability in the NodejsFunction local bundling pipeline of aws-cdk-lib. An actor who controls the value of one or more bundling properties (externalModules, define, loader, inject, or esbuildArgs) might execute arbitrary commands on the host running the CDK toolchain via injected shell metacharacters. This requires the threat actor to control the value of one or more [truncated]
CVE-2026-11393 is a HIGH severity vulnerability with a CVSS score of 8.8. The vulnerability is due to improper neutralization of triple-quote characters during Python code generation in AgentCore CLI before v0.14.2. This could allow an authenticated remote threat actor to execute arbitrary code on AWS AgentCore Runtime under the imported agent's IAM execution role and on the local environment of another u [truncated]
CVE-2026-11401 is a HIGH severity vulnerability with a CVSS score of 8.6. An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL allows a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rds_superuser, via a crafted function created by the actor that runs when that user connects to [truncated]
CVE-2026-9291 describes a vulnerability in the Amazon Braket SDK, specifically in the job results processing component. The issue is related to insecure deserialization, which might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results. The vulnerability has a CVSS score of 7.5 and is classified as HIGH [truncated]
CVE-2026-9255 is a HIGH severity vulnerability in Kiro CLI versions prior to 1.28.0. The issue arises from missing input source validation in the tool authorization prompt, allowing a local attacker to execute arbitrary tools or shell commands without user approval by manipulating input piped to kiro-cli via stdin. The vulnerability has a CVSS score of 8.4.
CVE-2026-9133 describes a high-severity flaw in the rabbitmq-aws component used with Amazon MQ. According to the CVE and NVD record, a debug ARN scheme was left active in the ARN resolver before version 0.2.1. If an authenticated user can reach the PUT /api/aws/arn/validate endpoint, the accepted arn:aws-debug:file scheme may allow arbitrary file reads from paths accessible to the RabbitMQ process. The pu [truncated]
CVE-2026-8838 is a critical client-side code execution issue in amazon-redshift-python-driver before 2.1.14. The flaw stems from unsafe use of Python eval() on data received from the server in vector_in(), which means a rogue server or man-in-the-middle actor could potentially trigger arbitrary code execution on the client. AWS and the GitHub advisory both direct users to upgrade to version 2.1.14.
CVE-2026-5709 is a high-severity vulnerability in AWS Research and Engineering Studio (RES). The issue arises from unsanitized input in the FileBrowser API, which could allow a remote authenticated actor to execute arbitrary commands on the cluster-manager EC2 instance. This vulnerability affects RES versions 2024.10 through 2025.12.01. Users are advised to upgrade to RES version 2026.03 or apply the corr [truncated]
CVE-2026-5708 is a HIGH severity vulnerability in AWS Research and Engineering Studio (RES) prior to version 2026.03. The vulnerability involves unsanitized control of user-modifiable attributes in the session creation component, allowing an authenticated remote user to escalate privileges and interact with AWS resources and services. This type of vulnerability typically allows attackers to gain unauthori [truncated]
CVE-2026-5707 is a high-severity vulnerability in AWS Research and Engineering Studio (RES) that allows remote authenticated actors to execute arbitrary OS commands as root on the virtual desktop host. The issue arises from unsanitized input in the virtual desktop session name handling. Affected versions include RES 2025.03 through 2025.12.01. Users are advised to upgrade to RES version 2026.03 or apply t [truncated]
CVE-2026-5429 is a high-severity vulnerability in the Kiro Agent webview of Kiro IDE versions prior to 0.8.140. The issue arises from unsanitized input during web page generation, allowing a remote unauthenticated threat actor to execute arbitrary code via a crafted color theme name when a local user opens the workspace. This requires the user to trust the workspace when prompted. The vulnerability has a [truncated]