Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-122193 1 Aws 1 Trusted-remote-execution 2026-11-06 9.9 Critical
OS command injection in the example SSM document provisioning script in Trusted Remote Execution (REX) before 2026-07-28 might allow an authenticated remote user who is permitted to invoke the Rex-RO or Rex-RW SSM document to execute arbitrary commands as root on the managed instance, bypassing Cedar policy enforcement. To remediate this issue, users should delete any Rex-RO and Rex-RW SSM documents created from the example script, in each account and Region where it was run.