CVE-2026-103956

Vendor

Amazon Web Services

CVSS

10.0

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 23
   CVE NVD 29d ago

   Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain…

   Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers…

   CVSS 10.0 Fix available CVE-2026-103956
2. 14
   AWS bulletin AWS 29d ago

   CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS

   Bulletin ID: 2026-124-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/02/2026 12:00 PM PDT Description: Loom is an AWS Labs open-source AI agent orchestration platform. We have identified and…

   CVE-2026-103956CVE-2026-103957CVE-2026-103958 Amazon Web Services