Unescaped consent-prompt renderer (HTML()) enables concealed-approval OS command injection in strands-agents/tools use_computer — RCE #4077800 Valid Command and Code Injection Medium 2026-11-06 – 13 Non-Production API Endpoints for the Route 53 Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #3092085 Valid Other weaknesses Medium 2025-05-27 – 14 Amazon Kendra Intelligent Ranking Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints #3044471 Valid Other weaknesses Medium 2025-05-28 – 16 Non-Production API Endpoints for the Neptune Graph Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #3068422 Valid Other weaknesses Medium 2025-05-27 – 17 Non-Production API Endpoints for the Glue Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #3031512 Valid Other weaknesses Medium 2025-04-25 – 18 Amazon Pinpoint SMS and Voice, version 2 Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints #3072841 Valid Other weaknesses Medium 2025-05-28 – 18 Non-Production API Endpoints for the AI Ops Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration #3418966 Valid Other weaknesses Medium 2026-01-06 – 18 Sandbox User Can Inject Rogue CA Certificate into OS Trust Store via Sudo-Allowed deploy-certificates.sh #3633146 Valid Cryptography Medium 2026-07-28 – 18 Non-Production API Endpoints for the Health Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #3042588 Valid Other weaknesses Medium 2025-05-28 – 21 Non-Production API Endpoints for the Amazon Cloudwatch Fails to Log to CloudTrail Resulting in Silent Permission Enumeration #3775702 Valid Other weaknesses Medium 2026-07-27 – 21 A potential risk in the cloudFrontExtensionsConsole which can be used to privilege escalation. #2805173 Valid Access Control Medium 2024-11-19 – 23 Non-Production API Endpoints for the cloudwatch Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #2972435 Valid Other weaknesses Medium 2025-04-25 – 23 Non-Production API Endpoints for the Global Accelerator Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration #3029552 Valid Other weaknesses Medium 2025-05-28 – 23 AWS Auto Scaling Service Reporting "AWS Internal" for CloudTrail Events Generated from Specific Endpoints #3419587 Valid Other weaknesses Medium 2026-01-05 – 23 Incomplete Input Sanitization in CodeInterpreter install_packages Allows Command Injection via pip Flags #3633123 Valid Command and Code Injection High 2026-09-16 – 23 Non-Production API Endpoints for the bedrock Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration Analysed #2951803 Valid Other weaknesses Medium 2025-05-28 – 25 V2Plugin.Decrypt panics on empty ciphertext (Remote DoS) Analysed #3620753 Valid Memory Corruption Medium 2026-05-28 – 25 RCE in AWS Amplify CLI via Prototype Chain Traversal in amplify-velocity-template Analysed #3897236 Valid Command and Code Injection High 2026-10-13 – 25 Non-Production API Endpoint for the EventBridge Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration Analysed #3021618 Valid Other weaknesses Medium 2025-05-28 – 26 Existence of completed pods allows for bypass of Kubernetes NetworkPolicy Analysed #3328291 Valid Access Control Medium 2025-11-19 – 28 Amazon Comprehend Medical Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints Analysed #2979238 Valid Other weaknesses Medium 2025-02-25 – 29 Non-Production API Endpoints for the Device Farm Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration Analysed #2999116 Valid Other weaknesses Medium 2025-03-04 – 30 Unauthenticated go-httpbin servers : Leads to Cookie Tossing on *.aws.dev and Open Redirect Analysed #3966599 Valid Authentication Medium 2026-10-16 – 32 Firecracker Out-of-bounds Read/Write Local Privilege Escalation Vulnerability Analysed #3738654 Valid Memory Corruption None 2026-06-11 – 33 Responsible disclosure - public S3 bucket exposing JSON/config files Analysed #3382796 Valid Information Disclosure Low 2025-11-14 – 36 Non-Production API Endpoints for the ssm Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration Analysed #2926361 Valid Other weaknesses Medium 2025-04-24 – 37 Non-Production API Endpoints for the bedrock-agent Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration Analysed #2800091 Valid Other weaknesses Medium 2025-05-28 – 38 Non-Production API Endpoint for the ElastiCache Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration Analysed #3021451 Valid Other weaknesses Medium 2025-04-25 – 40 V1Plugin.Decrypt panics on empty ciphertext (Remote DoS) Analysed #3620748 Valid Memory Corruption Medium 2026-05-28 – 41 Non-Production API Endpoints for the DocumentDB Elastic Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration Analysed #3009411 Valid Other weaknesses Medium 2025-03-11 – 45 bedrock-mantle.api.aws accepts Bedrock API keys outside the IAM Deny, CloudTrail signal, and invocation logging AWS publishes for Bedrock keys Analysed #3702072 Valid Misconfiguration and Insecure Design Medium 2026-07-14 – 45 GitHub Retired UsernameTakeover From [aws/████████] Analysed #3478646 Valid Supply Chain and Malicious Code Low 2026-08-03 – 48 Command Injection via Unsanitized Bundling Options in `aws-cdk-lib/aws-lambda-nodejs` Analysed #3558713 Valid Command and Code Injection High 2026-06-11 – 48 Bedrock AgentCore Starter Toolkit Creates Gateway IAM Roles Without Confused Deputy Protections Analysed #3632577 Valid Access Control Medium 2026-07-15 – 48 Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration Analysed #2981210 Valid Other weaknesses Medium 2025-02-26 – 50 AWS *.a2z.com | Unauthenticated Clickhouse UI : Database access + SSRF Analysed #3809407 Valid Authentication High 2026-07-22 – 53 Kiro IDE Stores Auth Tokens with World-Readable Permissions (0644) Analysed #3630605 Valid Access Control Medium 2026-07-09 – 54 A potential risk in the experimental-programmatic-access-ccft which can be used to privilege escalation. Analysed #2808412 Valid Access Control High 2024-11-06 – 55 (Part 2) Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration Analysed #3014785 Valid Other weaknesses Medium 2025-04-08 – 56 QuickSight Authorization Bypass: Chat Agents Accessible Despite Custom Permissions Denial Analysed #3577145 Valid No weakness recorded None 2026-05-12 – 59 AWS | Self Registration Internal LibreChat : Access to internal/proprietary LLMs Analysed #3287396 Valid Authentication Low 2025-08-25 – 61 External service interaction (HTTP) Analysed #2731133 Valid Server-Side Request Forgery High 2024-10-04 – 62 A potential risk in the aws-lambda-ecs-run-task which can be used to privilege escalation. Analysed #2894222 Valid Access Control Medium 2024-12-27 – 68 Unlimited Reuse of Coupon Code Allows Free Shipping on All Orders on ██████████ Analysed #3426839 Valid Input Validation and Logic Low 2026-02-09 – 69 Non-Production API Endpoints for the Amazon S3 Tables Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration Analysed #3780277 Valid Other weaknesses Medium 2026-07-02 – 69 Non-Production API Endpoints for the Forecast Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration Analysed #3022516 Valid Other weaknesses Medium 2025-03-24 – 75 XSS on Amazon Aquisition: elemental Analysed #3205667 Valid Cross-site Scripting High 2025-07-22 – 83 OS Command Injection in `aws-cdk-lib` NodejsFunction via Unsanitized `OsCommand` Helper (Supply Chain RCE) Analysed #3637898 Valid Command and Code Injection High 2026-07-06 – 111