Last seen March 19, 2026

Amazon AWS Remote Code Execution Vulnerability

Evidence indicates that Amazon AWS is affected by remote code execution.

Technical Severity

Medium severity

Lifecycle Status

STABLE

Sources

1 source: wiz.io

What Happened

Evidence indicates that Amazon AWS is affected by remote code execution.

Why This Matters

The evidence matters to defenders using Amazon AWS because it could let an attacker run code in affected environments.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether Amazon AWS is present in your environment and review the affected configuration.

Follow this incident as it develops Material-change notifications are being prepared for BugSkan Pro.

Exposure

Recommended Response

First Seen

Mar 19, 2026 05:30

Last Seen

Mar 19, 2026 05:30

Exploitation status: UNKNOWN

Primary entities:

Amazon AWS Remote Code Execution

Timeline

Incident first seen
Mar 19, 2026 05:30
BugSkan first recorded this incident.
AI-BOMs: A Practical Guide to AI Bills of Materials - wiz.io
Mar 19, 2026 05:30
wiz.io · Vulnerability

Sources

AI-BOMs: A Practical Guide to AI Bills of Materials - wiz.io

wiz.io · Mar 19, 2026 05:30

Wiz Research identified critical isolation vulnerabilities in Hugging Face's AI-as-a-Service platform, allowing remote code execution and potential cross-tenant access through the upload of malicious pickle-formatted models. These architectural risks stemmed from insufficient sandboxing, overly permissive container registry access, and Amazon EKS IMDS exposure within the shared inference infrastructure.

Open publisher source

Watchlist Match

Want personalized relevance?

Create an account to see which incidents overlap with the technologies you monitor.