CVE-2026-127119

Vendor

AWS

Product

aws-sdk-pandas

CVSS v3.1

5.3 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness

CWE-283, CWE-341

Exposure class

Cloud platform, Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   AWS bulletin AWS 4h ago

   CVE-2026-127119 - Unverified ownership of the default EMR cluster log location in AWS SDK for pandas

   Bulletin ID: 2026-181-AWS Publication Date: 11/12/2026 13:00 PM PST Description: We identified CVE-2026-127119, an issue in the EMR module of AWS SDK for pandas (awswrangler) from version 1.1.0 before 3.18.0. When a cluster is…

   CVE-2026-127119 Amazon Web Services
2. 28
   CVE NVD 4h ago

   Unverified ownership of the default cluster log location in the EMR module in AWS SDK for pandas (awswrangler) from 1.1.0 before 3.18.0 might allow…

   Unverified ownership of the default cluster log location in the EMR module in AWS SDK for pandas (awswrangler) from 1.1.0 before 3.18.0 might allow remote actors to read Amazon EMR cluster logs, including job step output, via a…

   CVSS 5.3 Fix available CVE-2026-127119 AWS