bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Monday, November 9, 2026

AWS ParallelCluster CLI Path Traversal Vulnerability – Update Required

AWS ParallelCluster CLI versions 3.0.0 through 3.15.x have a path traversal flaw in export-cluster-logs and export-image-logs commands. An authenticated attacker with S3 bucket write access could exploit this to write files outside the intended directory. Update to version 3.16.0 or later immediately—this one's worth your attention if you're using these export features.

source: [aws/security-bulletin]