Skip to content
OpenAdvisories

Product · AWS

AWS CLI

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-18654

    Disabled SSH host key verification in Amazon AWS CLI EMR helper commands

    Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the cli…

    AWS AWS CLI awscli PyPI
  • Medium 5.5
    CVE-2026-13769

    Overly permissive File Permissions in AWS CLI

    Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where the umask has not been configured to restrict file permissions (the default on most systems) may allow other local users on the same host to read cre…

    AWS AWS CLI awscli PyPI