EUVD-2026-67855Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AC:H because the attacker must control an S3 source and craft traversal-keyed objects before invoking the command; PR:L for the required ssm:SendCommand IAM permission; S:U as impact is contained to the targeted managed instance.
Primary rating from Vendor (AMZN).
CVSS VectorVendor: AMZN
Lifecycle Timeline
3DescriptionCVE.org
Improper limitation of a pathname to a restricted directory in the aws:downloadContent plugin in amazon-ssm-agent before 3.3.4515.0 might allow an authenticated remote user whose ssm:SendCommand permission is restricted to the AWS-DownloadContent document, to write arbitrary files outside the intended download directory with root privileges, via crafted object keys in the S3 source the document is directed to retrieve. This issue may lead to arbitrary code execution as root if specific sensitive files are overwritten.
To remediate this issue, customers should upgrade amazon-ssm-agent to version 3.3.4515.0 or later.
AnalysisAI
Path traversal in the aws:downloadContent plugin of amazon-ssm-agent before 3.3.4515.0 allows an authenticated attacker with a specifically scoped ssm:SendCommand IAM permission to write arbitrary files outside the intended download directory with root privileges on targeted managed instances. By directing the AWS-DownloadContent SSM document to retrieve from a controlled S3 source containing crafted object keys with path traversal sequences, an attacker can overwrite sensitive system files and escalate to full remote code execution as root. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold valid AWS IAM credentials with the ssm:SendCommand permission, specifically when that permission is scoped or restricted to the AWS-DownloadContent SSM document type - a common least-privilege IAM configuration for content delivery automation. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-assigned CVSS 4.0 score of 8.7 (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H) accurately reflects the high potential impact but slightly understates the attack prerequisites. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade amazon-ssm-agent to version 3.3.4515.0 or later as directed by the vendor advisory at https://aws.amazon.com/security/security-bulletins/2026-091-aws/ and confirmed at https://github.com/aws/amazon-ssm-agent/releases/tag/3.3.4515.0. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, scan all managed instances using AWS Systems Manager Compliance or inventory reporting to identify amazon-ssm-agent versions below 3.3.4515.0. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Amazon Ssm Agent
View allSame weakness CWE-23 – Relative Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today