Aws Amazon Ssm Agent
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Aws Amazon Ssm Agent.
By the Year
In 2026 there have been 1 vulnerability in Aws Amazon Ssm Agent with an average score of 9.9 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 9.90 |
It may take a day or so for new Amazon Ssm Agent vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Aws Amazon Ssm Agent Security Vulnerabilities
Amazon SSM Agent SSRF via Port Forwarding (3.3.4850)
CVE-2026-89049
9.9 - Critical
- September 10, 2026
A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent (SSM Agent) before 3.3.4851.0 on all platforms might allow an authenticated remote user to bypass the remote destination denylist and reach link-local endpoints, potentially obtaining the temporary IAM role credentials of a managed instance and acting with that role's permissions from outside the instance, via a crafted destination host value that uses an alternate representation of a denied link-local address. To remediate this issue, users should upgrade to version 3.3.4851.0 or later.
SSRF
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Aws Amazon Ssm Agent or by Aws? Click the Watch button to subscribe.
