Critical Brotli Decoder Vulnerability Affects Multiple AWS Services

CVE-2026-111497 is a nasty remote code execution and memory disclosure bug in the native Brotli decompression library that could let attackers execute code or leak process memory. AWS Lambda, Amplify, App Runner, CloudWatch Synthetics, CodeBuild, Elastic Beanstalk, and Elemental MediaLive are all affected—some require your action. Check AWS's security bulletin for service-specific mitigation steps.