AWS ParallelCluster CLI Path Traversal Vulnerability – Update Required
AWS ParallelCluster CLI versions 3.0.0 through 3.15.x have a path traversal flaw in export-cluster-logs and export-image-logs commands. An authenticated attacker with S3 bucket write access could exploit this to write files outside the intended directory. Update to version 3.16.0 or later immediately—this one's worth your attention if you're using these export features.
source: [aws/security-bulletin]