CVE-2026-13769 โ Insecure file permissions in AWS CLI
Cli ยท 2026-10-19
Actions
Technical Details
| Affected Versions | <=1.44.77 (v1), <=2.34.28 (v2) |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-13769 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update AWS CLI to versions 1.44.78 (v1) and 2.34.29 (v2) to address the insecure file permissions vulnerability (CVE-2026-13769) and prevent unauthorized access to credentials.
For Platform Teams
Deploy the updated AWS CLI versions across your environment to enhance security and ensure compliance with the latest AWS security standards.
For Executives
Implement the latest AWS CLI updates to mitigate security risks associated with CVE-2026-13769, ensuring credential safety and maintaining trust in your AWS environment.
Source
Related Cli Updates
- CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI (2026-10-19)
- CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI (2026-10-14)
- CVE-2026-13769 โ Insecure file permissions in AWS CLI (2026-10-14)
- CVE-2026-13769 โ Insecure file permissions in AWS CLI (2026-10-09)
- AWS Client VPN now supports device posture assessment (2026-10-05)