Loading story…
Two advisories disclosed policy injection weaknesses in Amazon CloudFront signing implementations for AWS SDK for Java v2 and AWS SDK for .NET, affecting applications that build signed URLs or signed cookies with unvalidated user input. In the vulnerable pattern, attacker-controlled data is inserted into the Resource field or other JSON policy values without proper escaping, allowing an attacker to break out of the intended string and append malicious JSON elements to the policy document.
By injecting a forged Condition block, an attacker can cause the application to sign a manipulated CloudFront policy that CloudFront will still accept as valid because the signature matches the altered document. The issue can let attackers extend expiration times far beyond intended limits using values such as AWS:EpochTime, and in some cases remove or override IP-based restrictions if duplicate JSON keys are parsed in the attacker's favor, weakening access controls for protected CloudFront content.
See affected versions and whether adversaries are exploiting it.
1 event from the most recent confirmed update back to the earliest known activity.
Two advisories described JSON/policy injection scenarios affecting applications that use AWS SDK for Java v2 CloudFront utilities or AWS SDK for .NET CloudFront signers with unvalidated user input. The disclosures explained that crafted input could alter signed CloudFront policies to extend expiration times or bypass intended IP or time-based access restrictions.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
cvereports.com
Open sourcecvereports.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
AWS disclosed two severe vulnerabilities in **AWS Ops Wheel** that can let attackers seize administrative control of deployments and manipulate tenant data. **`CVE-2026-6911`** is an authentication bypass caused by missing JWT signature verification at the API Gateway endpoint, allowing unauthenticated attackers to forge tokens and gain unintended admin access. AWS said successful exploitation could let attackers read, modify, and delete application data across tenants and manage Cognito user accounts in the deployment's User Pool; the flaw is tracked as **`CWE-347`** and carries a critical **CVSS v3.1 `AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`** rating. AWS also fixed **`CVE-2026-6912`**, a privilege-escalation issue in Ops Wheel's Cognito User Pool configuration that let authenticated users promote themselves to deployment administrator by setting the **`custom:deployment_admin`** attribute through the `UpdateUserAttributes` API. The bug, classified as **`CWE-915`**, exposed the same ability to manage Cognito user accounts and carried a high-severity **CVSS v3.1 `AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`** score. AWS directed customers to redeploy from the updated repository and apply the fixes to any forked or derivative code, with patches referenced in an AWS security bulletin, a GitHub pull request, and a GitHub security advisory.
Jun 29, 2026
AWS disclosed two critical vulnerabilities in **AWS Ops Wheel v2** that could let attackers seize full administrative control of customer deployments. **CVE-2026-6911** stems from missing cryptographic verification of JWT signatures in the v2 API, allowing an unauthenticated attacker with network access to the API Gateway endpoint to forge tokens with arbitrary tenant and administrator claims. The flaw could expose all application data across tenants and permit management of Amazon Cognito user accounts; it affects deployments built from **PR #147 through PR #163**, while v1 is not affected. GitHub advisory **`GHSA-v5vr-8w3c-37x2`** says the issue was fixed in **PR #164**, and temporary mitigations include restricting API Gateway access with **AWS WAF** or **VPC** controls. A second issue, **CVE-2026-6912**, allowed any authenticated user to escalate privileges by modifying self-writable security-sensitive Cognito attributes such as `custom:deployment_admin` through the Cognito `UpdateUserAttributes` API. An attacker could promote their own account to deployment administrator, then read, modify, or delete cross-tenant data and manage all users in the deployment’s Cognito User Pool. That flaw affects the same **PR #147-#163** range and was fixed in **PR #165** by tightening Cognito `WriteAttributes` and adding server-side email verification tied to `DEPLOYMENT_ADMIN_EMAILS`. Because Ops Wheel is deployed into customer AWS accounts through CloudFormation, each affected deployment and any forks or derivative code must be individually updated.
Jun 29, 2026
AWS disclosed **CVE-2026-16796**, a high-severity command argument injection flaw in the Bedrock AgentCore Python SDK before version `1.18.1` that can let an authenticated user execute arbitrary commands inside the Code Interpreter sandbox. The issue affects the `install_packages()` function, where crafted Python package specifiers and improperly neutralized argument delimiters can be passed into a shell-backed `pip install` flow, resulting in **CWE-88** command injection. The vulnerability carries a **CVSS v3.1 score of 7.3** and can expose sensitive data in the sandbox, including temporary files and environment tokens, with potential for further movement in weakly segmented environments. AWS said the fix in version `1.18.1` tightens validation for package inputs, including PEP 508 extras, and quotes package arguments with `shlex.quote`; users are advised to upgrade immediately to the patched release.
Jul 25, 2026