CVE-2026-119115High· 8.5▾ TwilightIncorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow an authenticated remote user to obtain certificates, including subordinate CA certificate…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 46.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow an authenticated remote user to obtain certificates, including subordinate CA certificates, signed by a cluster-scoped AWS Private CA issuer that their approval policy does not authorize.
To remediate this issue, users should upgrade aws-privateca-issuer to version v1.10.1 or the AWS Private CA Connector for Kubernetes EKS add-on to version v1.10.1-eksbuild.1, and update any certificate requests, Certificate resources, or Ingress annotations whose issuerRef.kind is missing, incorrect, or does not match the referenced issuer, since v1.10.1 requires issuerRef.kind to be exactly AWSPCAIssuer or AWSPCAClusterIssuer and to match the issuer it references.
aws-privateca-issuer < 1.10.1aws-privateca-issuer < 1.10.1-eksbuild.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115416High· 7.7Incorrect authorization checks in Amazon Athena engine version 3 query processing
CVE-2026-116635Medium· 6.1Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
CVE-2026-120497Medium· 5.0Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
CVE-2026-119301High· 7.9Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
CVE-2026-119117Medium· 6.5Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java
CVE-2026-119116High· 7.8Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c