Loading story…
A critical SSRF flaw in AWS Systems Manager (SSM) Agent, tracked as CVE-2026-89049, lets authenticated AWS users authorized to initiate remote-host port-forwarding sessions bypass protections blocking link-local destinations. By supplying alternate representations of denied addresses, an attacker can reach the EC2 Instance Metadata Service at 169.254.169.254 through the affected remote-host forwarding capability.
Access to the metadata service could expose temporary credentials for the IAM role attached to the targeted EC2 instance, enabling further activity under that role's permissions. The issue affects SSM Agent versions earlier than 3.3.4851.0 and is fixed in version 3.3.4851.0; organizations should update agents, restrict access to AWS-StartPortForwardingSessionToRemoteHost, tightly scope ssm:StartSession, and review Session Manager activity and EC2 instance-role usage.
See affected versions and whether adversaries are exploiting it.
1 event from the most recent confirmed update back to the earliest known activity.
AWS fixed CVE-2026-89049, a critical SSRF and unsafe equivalent input-validation flaw in SSM Agent remote-host port forwarding, in version 3.3.4851.0. Authenticated users able to start remote-host port-forwarding sessions could bypass link-local address restrictions and potentially access EC2 instance metadata credentials.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
cryptika.com
Open sourcecybersecuritynews.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
AWS documented an incident-response scenario in which an attacker exploited a server-side request forgery (SSRF) flaw in an EC2-hosted web application to retrieve temporary credentials for the instance's attached `webdev` IAM role through IMDSv1. The attacker enumerated the role's permissions, established an AWS Management Console session without MFA, pivoted from `us-east-1` to `us-east-2`, and enumerated Amazon Bedrock foundation models. The actor then invoked Amazon Nova Pro through the Converse API, resulting in unauthorized token consumption. The activity was enabled by IMDSv1 exposure, an overprivileged EC2 role with unnecessary cross-Region Bedrock permissions, and missing MFA, with inconsistent regional logging and controls potentially limiting detection. AWS advises remediating the SSRF flaw, requiring IMDSv2 for EC2 metadata access, revoking and investigating use of the compromised role, reviewing CloudTrail across all Regions, restricting Bedrock permissions, and enabling Bedrock model-invocation logging to determine whether prompts or generated outputs were exposed.
Sep 5, 2026
**CVE-2020-13379** is a server-side request forgery (SSRF) flaw in Grafana’s avatar-processing functionality that can cause a vulnerable Grafana server to make attacker-directed HTTP requests. The issue affects Grafana versions from 3.0.1 through 7.0.1 and was addressed in versions 7.0.2 and 6.7.4. Exploitation can turn an internet-exposed Grafana deployment into an internal-network proxy, allowing requests to services otherwise inaccessible to the attacker. On Amazon EC2, the flaw can be used to target the link-local Instance Metadata Service at `169.254.169.254`, including metadata paths that disclose instance configuration and IAM-role credentials, as well as instance user data. Organizations running affected Grafana versions on EC2 should upgrade, restrict Grafana’s outbound network access, and require IMDSv2 to reduce exposure to metadata-service SSRF attacks.
Sep 3, 2026
Amazon disclosed `CVE-2026-7461`, an OS command injection flaw in the Amazon ECS Agent for Windows that can let a remote authenticated actor execute shell commands as `SYSTEM` on the underlying host. The vulnerability affects ECS agent versions `1.47.0` through `1.102.2` and stems from improper input validation during the mounting of FSx Windows File Server volumes, where a specially crafted username field in an ECS task definition can trigger command execution. The issue is limited to ECS Windows worker instances and does not affect ECS on Fargate. Amazon said exploitation requires the ability to register ECS task definitions or to modify credentials in AWS Secrets Manager or SSM Parameter Store referenced by the FSx volume configuration. The company fixed the flaw in ECS agent version `1.103.0` and advised customers to upgrade to the latest ECS-optimized Windows AMI; as interim mitigations, AWS recommended restricting `ecs:RegisterTaskDefinition` permissions and limiting write access to the affected secrets.
Jun 29, 2026