CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

Amazon Web Services Version 2 imported change current

Imported from official source

Bulletin ID: 2026-107-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/10/2026 11:30 AM PDT Description: AWS Systems Manager Agent (SSM Agent) is software that runs on managed nodes (EC2 instances, on-premises servers, and other supported machines) and processes requests from the AWS Systems Manager service, enabling capabilities including Session Manager port for …

This version

Version: 2 of 2
Recorded: September 17, 2026 21:30
Change: Imported change
Content hash: 6d86483b36f6056f713e85c1653af227
All versions: Revision history