CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook
Sam Cli ยท 2026-10-22
Actions
Technical Details
| Affected Versions | >=1.63.0, <=1.166.1 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-115414 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update AWS SAM CLI to version v1.166.2 to address the OS command injection issue in the Terraform hook and ensure all Terraform configurations and plan files are from trusted sources.
For Platform Teams
Deploy the latest AWS SAM CLI version v1.166.2 to enhance security and reduce the risk of command injection attacks in serverless application builds.
For Executives
Implement immediate upgrades to AWS SAM CLI to version v1.166.2 to mitigate the OS command injection vulnerability (CVE-2026-115414) and ensure secure build processes.