AWS warns of CVE-2026-122193, a command injection flaw in REX setup guide examples
VULNERABILITYCVE-2026-122193redteam/daily · 1 source
- Severity
- Medium
- Highest CVSS
- 9.3
- Exploited
- Not known
- Sources
- 1
What happened
Amazon Web Services (AWS) has disclosed a security flaw in an example script from its setup guide for Trusted Remote Execution (REX). The flaw could let someone run unintended commands on a computer managed by AWS, outside the protected area meant to contain them. AWS says shipped versions of REX are not affected.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Check whether you created the Rex-RO or Rex-RW SSM documents using the example script from the REX setup guide.
- Review who holds permission to invoke those SSM documents and remove any access that is not needed.
- Read the full AWS bulletin 2026-173-AWS for the latest and most complete information.
Written by AI from the sources, checked against them
Vulnerabilities
Full story timeline · 2 updates
Who reported · 1 outlet
AWS Security Bulletins
Who and what is in it
Companies