Cybersecuritynews2026-09-14 15:14:39

AWS Systems Manager Agent Vulnerability Allows Attackers to Bypass Port-Forwarding Restrictions

A critical vulnerability in the AWS Systems Manager Agent could let authenticated attackers bypass remote-host port-forwarding restrictions and access sensitive link-local services, including the Amazon EC2 Instance Metadata Service.

Summary

The flaw, tracked as CVE-2026-89049, affects Amazon SSM Agent versions earlier than 3.3.4851.0 and has been fixed in version 3.3.4851.0.

cyber security newsvulnerabilityawscyber security

This summary is a partial excerpt, the source's own feed cuts off here. Read the full story at Cybersecuritynews for the rest.

KazaSec's take

A newly disclosed vulnerability is only a real risk to your organization once it's confirmed present and exploitable in your own environment, not every CVE applies equally to every network. Knowing the difference is exactly what a proper vulnerability assessment is for.

Coverage details

Source: Cybersecuritynews
Published: 2026-09-14 15:14:39
Author: abinaya
Category: technologytop

We've archived 257 other articles touching the same topic (cyber security news, vulnerability, aws) , see the full security news archive.

Worried this kind of story could be about you next?

We help organizations find and fix the gaps before they make headlines.

Request a Security Assessment Browse Services