Unescaped consent-prompt renderer (HTML()) enables concealed-approval OS command injection in strands-agents/tools use_computer — RCE #4077800 Valid Command and Code Injection Medium 2026-11-06 – 13 Non-Production API Endpoints for the Route 53 Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #3092085 Valid Other weaknesses Medium 2025-05-27 – 14 Amazon Kendra Intelligent Ranking Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints #3044471 Valid Other weaknesses Medium 2025-05-28 – 16 Non-Production API Endpoints for the Neptune Graph Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #3068422 Valid Other weaknesses Medium 2025-05-27 – 17 Non-Production API Endpoints for the Glue Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #3031512 Valid Other weaknesses Medium 2025-04-25 – 18 Amazon Pinpoint SMS and Voice, version 2 Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints #3072841 Valid Other weaknesses Medium 2025-05-28 – 18 Non-Production API Endpoints for the AI Ops Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration #3418966 Valid Other weaknesses Medium 2026-01-06 – 18 Sandbox User Can Inject Rogue CA Certificate into OS Trust Store via Sudo-Allowed deploy-certificates.sh #3633146 Valid Cryptography Medium 2026-07-28 – 18 Command Injection on Amazon Q Developer CLI via malicious .amazonq/mcp.json leads to arbitrary code execution #3427370 Informative Command and Code Injection None 2026-01-16 – 19 Encryption context keys and values logged at INFO level #3620760 Informative Information Disclosure None 2026-04-10 – 19 Non-Production API Endpoints for the Health Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #3042588 Valid Other weaknesses Medium 2025-05-28 – 21 Non-Production API Endpoints for the Amazon Cloudwatch Fails to Log to CloudTrail Resulting in Silent Permission Enumeration #3775702 Valid Other weaknesses Medium 2026-07-27 – 21 Health check errors silently dropped when channel buffer full #3620761 Informative No weakness recorded None 2026-04-07 – 22 A potential risk in the cloudFrontExtensionsConsole which can be used to privilege escalation. #2805173 Valid Access Control Medium 2024-11-19 – 23 Non-Production API Endpoints for the cloudwatch Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #2972435 Valid Other weaknesses Medium 2025-04-25 – 23 Non-Production API Endpoints for the Global Accelerator Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #3029552 Valid Other weaknesses Medium 2025-05-28 – 23 AWS Auto Scaling Service Reporting "AWS Internal" for CloudTrail Events Generated from Specific Endpoints #3419587 Valid Other weaknesses Medium 2026-01-05 – 23 Incomplete Input Sanitization in CodeInterpreter install_packages Allows Command Injection via pip Flags #3633123 Valid Command and Code Injection High 2026-09-16 – 23 Remote Code Execution in Amazon MWAA due to outdated Apache Airflow version #3217840 Informative Command and Code Injection None 2025-08-14 – 24 Non-Production API Endpoints for the bedrock Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #2951803 Valid Other weaknesses Medium 2025-05-28 – 25 V2Plugin.Decrypt panics on empty ciphertext (Remote DoS) #3620753 Valid Memory Corruption Medium 2026-05-28 – 25 RCE in AWS Amplify CLI via Prototype Chain Traversal in amplify-velocity-template #3897236 Valid Command and Code Injection High 2026-10-13 – 25 Non-Production API Endpoint for the EventBridge Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration #3021618 Valid Other weaknesses Medium 2025-05-28 – 26 Existence of completed pods allows for bypass of Kubernetes NetworkPolicy #3328291 Valid Access Control Medium 2025-11-19 – 28 Amazon Comprehend Medical Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints #2979238 Valid Other weaknesses Medium 2025-02-25 – 29 Non-Production API Endpoints for the Device Farm Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #2999116 Valid Other weaknesses Medium 2025-03-04 – 30 Unauthenticated go-httpbin servers : Leads to Cookie Tossing on *.aws.dev and Open Redirect #3966599 Valid Authentication Medium 2026-10-16 – 32 Firecracker Out-of-bounds Read/Write Local Privilege Escalation Vulnerability #3738654 Valid Memory Corruption None 2026-06-11 – 33 Session Timeout Does Not Enforce Re-Authentication on AWS Access Portal #2800511 Duplicate Other weaknesses Medium 2025-03-05 – 36 Responsible disclosure - public S3 bucket exposing JSON/config files #3382796 Valid Information Disclosure Low 2025-11-14 – 36 Non-Production API Endpoints for the ssm Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #2926361 Valid Other weaknesses Medium 2025-04-24 – 37 Non-Production API Endpoints for the bedrock-agent Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #2800091 Valid Other weaknesses Medium 2025-05-28 – 38 Non-Production API Endpoint for the ElastiCache Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration #3021451 Valid Other weaknesses Medium 2025-04-25 – 40 SQL Injection Detection Bypass in AWS WAF Managed Rules (AWSManagedRulesSQLiRuleSet) #3591725 Informative SQL Injection None 2026-04-15 – 40 Sensitive API Key Leakage #3017105 Informative Cryptography Medium 2025-03-04 – 41 V1Plugin.Decrypt panics on empty ciphertext (Remote DoS) #3620748 Valid Memory Corruption Medium 2026-05-28 – 41 CVE-2020-5902 #2794126 Informative Supply Chain and Malicious Code Critical 2024-12-24 – 43 Arbitrary Code Execution via Scanner Bypass in **aws-diagram-mcp-server** `exec()` Namespace #3557138 Informative No weakness recorded None 2026-03-09 – 43 Non-Production API Endpoints for the DocumentDB Elastic Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #3009411 Valid Other weaknesses Medium 2025-03-11 – 45 bedrock-mantle.api.aws accepts Bedrock API keys outside the IAM Deny, CloudTrail signal, and invocation logging AWS publishes for Bedrock keys #3702072 Valid Misconfiguration and Insecure Design Medium 2026-07-14 – 45 Information Disclosure Due To exposed .env file (Directory Listing) at ████████ #2784712 Informative Information Disclosure High 2024-10-22 – 46 GitHub Retired UsernameTakeover From [aws/████████] #3478646 Valid Supply Chain and Malicious Code Low 2026-08-03 – 48 Command Injection via Unsanitized Bundling Options in `aws-cdk-lib/aws-lambda-nodejs` #3558713 Valid Command and Code Injection High 2026-06-11 – 48 Bedrock AgentCore Starter Toolkit Creates Gateway IAM Roles Without Confused Deputy Protections #3632577 Valid Access Control Medium 2026-07-15 – 48 Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #2981210 Valid Other weaknesses Medium 2025-02-26 – 50 Bedrock Guardrails Evasion with Prompt Formatting #3056937 Informative No weakness recorded None 2025-05-15 – 53 AWS *.a2z.com | Unauthenticated Clickhouse UI : Database access + SSRF #3809407 Valid Authentication High 2026-07-22 – 53 Kiro IDE Stores Auth Tokens with World-Readable Permissions (0644) #3630605 Valid Access Control Medium 2026-07-09 – 54 Reflected XSS on Amazon EC2 Instance #2787650 Informative Cross-site Scripting High 2024-12-24 – 55 A potential risk in the experimental-programmatic-access-ccft which can be used to privilege escalation. #2808412 Valid Access Control High 2024-11-06 – 55