Skip to content
OpenAdvisories

Package · Go

github.com/aws/amazon-ecs-agent

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.2
    CVE-2026-7461

    OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials

    Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allow a remote authenticated threat actor to execute shell commands with SYSTEM privil…

    AWS Amazon ECS Agent github.com/aws/amazon-ecs-agent Go
  • Medium 4.3
    CVE-2025-9039

    Information Disclosure in Amazon ECS Container Agent

    We identified an issue in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the same security group or if their security groups allow incoming connections that …

    amazon ECS github.com/aws/amazon-ecs-agent Go