CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook

Imported from official source

Security notice

Cybersecurity Open Source Classified by Officially

Bulletin ID: 2026-145-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/22/2026 11:30 AM PDT Description: AWS SAM CLI is an open-source framework for building serverless applications. We identified CVE-2026-115414, an OS command injection issue in the Terraform hook (sam build --hook-name terraform) in AWS SAM CLI. …

This is an extract. The publication continues at the source.

Read the original at the source: https://aws.amazon.com/security/security-bulletins/rss/2026-145-aws/

Officially imported this from Amazon Web Services’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization
Amazon Web Services — imported from official source
Official source
https://aws.amazon.com/security/security-bulletins/feed/ RSS
Imported
October 22, 2026 20:00
Versions
1 recorded
Identity
88af8529196585374f2e4a683845bef78ec79f37

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.