amazon aws CVE-2026-86830 in Amazon and Aws Products
Published on September 14, 2026

Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

product logo product logo
Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended temporary elevated access to the AWS accounts accessed using the TEAM deployment. This issue has been addressed in TEAM version 1.5.1 or later. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-86830 is exploitable with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.


Products Associated with CVE-2026-86830

stack.watch emails you whenever new vulnerabilities are published in Amazon Aws or Aws Iam Identity Center Team. Just hit a watch button to start following.

Amazon Aws
 
Aws Iam Identity Center Team
 

Affected Versions

AWS iam-identity-center-team: