Skip to content
OpenAdvisories

Product · AWS

AWS Encryption SDK for Python

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-6550

    Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python

    Cryptographic algorithm downgrade in the caching layer of Amazon AWS Encryption SDK for Python before version 3.3.1 and before version 4.0.5 might allow an authenticated local threat actor to bypass key commitment policy enforcement via a shared key cache, re…

    AWS AWS Encryption SDK for Python aws-encryption-sdk PyPI