CVE-2026-107322

Vendor

Amazon Web Services

CVSS

7.8

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 14
   AWS bulletin AWS 23d ago

   CVE-2026-107322 - OS command injection in Amazon Agent Plugins for AWS databases-on-aws

   Bulletin ID: 2026-130-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/08/2026 11:30 AM PDT Description: Amazon Agent Plugins for AWS is an open source collection of plugins that extends supported…

   CVE-2026-107322 Amazon Web Services
2. 10
   CVE NVD 23d ago

   An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated…

   An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper…

   CVSS 7.8 CVE-2026-107322