CVE-2026-103957

Vendor

Amazon Web Services

CVSS

6.2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 14
   AWS bulletin AWS 29d ago

   CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS

   Bulletin ID: 2026-124-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/02/2026 12:00 PM PDT Description: Loom is an AWS Labs open-source AI agent orchestration platform. We have identified and…

   CVE-2026-103956CVE-2026-103957CVE-2026-103958 Amazon Web Services
2. 8
   CVE NVD 29d ago

   Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the…

   Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue…

   CVSS 6.2 Fix available CVE-2026-103957