CVE-2026-103958

Vendor

Amazon Web Services

CVSS

7.6

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 15
   CVE NVD 29d ago

   Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote…

   Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to…

   CVSS 7.6 Fix available CVE-2026-103958
2. 14
   AWS bulletin AWS 29d ago

   CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS

   Bulletin ID: 2026-124-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/02/2026 12:00 PM PDT Description: Loom is an AWS Labs open-source AI agent orchestration platform. We have identified and…

   CVE-2026-103956CVE-2026-103957CVE-2026-103958 Amazon Web Services