Skip to content
OpenAdvisories

Product · amazon

EMR

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2025-8904

    Privilege escalation issue in Amazon EMR Secret Agent component

    Amazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users are a…

    amazon EMR