Bartek Chojnacki

Amazon SageMaker Unified Studio has a nasty OS command injection bug (CVE-2026-104019) in the startup script that could let project members execute arbitrary code in other users' Spaces. With Trusted Identity Propagation enabled, attackers could snag temporary credentials and impersonate colleagues. AWS has patched supported versions (2.14.12+, 3.9.12+, 4.0.11+, 4.1.11+, 4.2.8+, 4.3.5+, 4.4.3+), deploying automatically on next Space startup. If you're running older versions, upgrade now—older branches are EOL with no fixes available.

Amazon EFS CSI Driver versions 3.1.0 through 3.4.2 have a mount option injection flaw (CVE-2026-103505). Users with PersistentVolume creation privileges can exploit the mounttargetipmap attribute to inject malicious mount options. If you're running affected versions, update immediately—this requires action.

Loom for AWS has three nasty vulnerabilities that need your attention. CVE-2026-103956 lets unauthenticated attackers grab full admin access when no identity provider is set up. CVE-2026-103957 and CVE-2026-103958 allow authenticated users to leak OAuth2 tokens and credentials through misconfigured discovery endpoints. Upgrade to version 1.7.0 immediately—this is a must-do, not optional.

Powertools for AWS Lambda (Python) versions 3.6.0 through 3.34.0 contain CVE-2026-104002, a fail-open error in the data masking utility that could expose sensitive fields meant to be masked. This is a serious issue requiring immediate action—update to the patched version as soon as possible. If you're running affected versions, prioritize this security patch to prevent potential data exposure in your serverless applications.

AWS security-agent-mcp-server (versions 0.1.1–0.2.0) has a critical argument injection flaw in its diff scan feature. An attacker can craft malicious reference values to execute arbitrary file operations outside the workspace, bypassing security controls. If you're using affected versions, update immediately to patch this vulnerability.

Amazon Ion Python versions before 0.15.0 have a nasty recursion bug (CVE-2026-104020) that lets attackers crash your app with deeply nested Ion values. This denial-of-service vulnerability is marked Important, so you'll want to upgrade ASAP if you're using this library. Patch to version 0.15.0 or later to stay safe.

Amazon Aurora serverless now jumps up to 16 ACUs per second (scaling to 256 ACUs total) instead of smaller increments, making it perfect for bursty agentic AI applications. The upgrade is automatic on platform versions 3 and 4, with no config needed—just pay for what you actually use.

Aurora PostgreSQL now lets you query Apache Iceberg and Parquet files stored in S3 or AWS Glue Data Catalog without ETL pipelines or data duplication—your existing PostgreSQL apps and BI tools work unchanged. The feature uses DuckDB's query engine under the hood and is available in all AWS regions (including GovCloud) on PostgreSQL 17.11, 18.6 and higher at no extra cost.

Amazon Aurora and RDS now support R8a instances powered by 5th generation AMD EPYC processors, giving you up to 75 Gbps network bandwidth and 60 Gbps EBS bandwidth for demanding database workloads. These instances are rolling out across major regions including US, Canada, Asia Pacific, and Europe, supporting PostgreSQL, MySQL, and MariaDB engines.