early signals AWS security bulletins infra

CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

// AI summary

AWS Systems Manager Agent has a Server-side request forgery flaw, CVE-2026-89049, within its Session Manager port forwarding functionality.

// from the source

Read this article
Read at aws.amazon.com ↗ More from AWS security bulletins

# more from AWS security bulletins

  1. AWS security bulletins infra

    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

    aws.amazon.com
  2. AWS security bulletins infra

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    aws.amazon.com
  3. AWS security bulletins infra

    CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools

    aws.amazon.com
  4. AWS security bulletins infra

    CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

    aws.amazon.com
  5. AWS security bulletins infra

    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

    aws.amazon.com