Critical PATH Injection Flaw in OpenJD Sessions and AWS Deadline Cloud Worker Agent
OpenJD Sessions for Python (before 0.11.0) and AWS Deadline Cloud worker agent (before 0.33.0) on Linux have a nasty untrusted search path vulnerability. An authenticated user submitting jobs could craft malicious code to execute arbitrary commands as the worker agent and steal AWS credentials. Update immediately if you're running affected versions—this one requires action.
source: [aws/security-bulletin]