CVE-2026-108096

Vendor

Amazon Web Services

Product

AWS services

CVSS

6.5

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   AWS bulletin AWS 22d ago

   CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category

   Bulletin ID: 2026-133-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/09/2026 11:00 AM PDT Description: AWS Amplify API Category is a CDK Construct library for defining GraphQL data models with…

   CVE-2026-108096 Amazon Web Services
2. 13
   CVE NVD 22d ago

   Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might…

   Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same…

   CVSS 6.5 Fix available CVE-2026-108096 Amazon Web Services