CVE record · 2 sources
CVE-2026-122193
CVSS 9.9OS command injection in the example SSM document provisioning script in Trusted Remote Execution (REX) before 2026-07-28 might allow an authenticated…
- Vendor
- AWS
- Product
- trusted-remote-execution
- CVSS v3.1
- 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weakness
- CWE-78
- Exposure class
- Cloud platform
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
CVE-2026-122193 - Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM documents in Trusted Remote Execution (REX)
Bulletin ID: 2026-173-AWS Publication Date: 11/06/2026 09:00 AM PST Description: We identified CVE-2026-122193, an OS command injection issue in an example provided in the set-up documentation. The example included a script that…
-
OS command injection in the example SSM document provisioning script in Trusted Remote Execution (REX) before 2026-07-28 might allow an authenticated…
OS command injection in the example SSM document provisioning script in Trusted Remote Execution (REX) before 2026-07-28 might allow an authenticated remote user who is permitted to invoke the Rex-RO or Rex-RW SSM document to…