CVE-2026-18654

EUVD-2026-52415
Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR cluster endpoint.



To remediate this issue, users should upgrade to AWS CLI v1 1.45.28 or later, or AWS CLI v2 2.35.3 or later.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 40.09%
Affected Products (NVD)
VendorProductVersion
amazonaws_command_line_interface
𝑥
< 1.45.28
amazonaws_command_line_interface
2.0.0 ≤
𝑥
< 2.35.3
𝑥
= Vulnerable software versions
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
awscli
Amazon Linux 2
0:1.18.147-1.amzn2.0.4
fixed
awscli-2
Amazon Linux 2023
0:2.36.47-4.amzn2023.0.1
fixed
Common Weakness Enumeration
References
https://aws.amazon.com/security/security-bulletins/2026-071-aws/
https://github.com/aws/aws-cli/blob/develop/CHANGELOG.rst
https://github.com/aws/aws-cli/blob/v2/CHANGELOG.rst
https://github.com/aws/aws-cli/security/advisories/GHSA-hqvf-45jj-mccq