AWS Nitro Enclaves SDK for C: Two Critical Vulnerabilities Patched

AWS Nitro Enclaves SDK for C versions up to v0.4.5 have two nasty security issues. CVE-2026-119116 is a use-after-free bug in kmstool-enclave that lets local attackers execute arbitrary code inside the enclave via crafted vsock messages. CVE-2026-119148 is an input validation flaw allowing attackers to impersonate AWS KMS and inject fake key material. If you're running affected versions, update immediately—this one requires action.