CVE-2026-81849 - Path traversal in the aws:downloadContent plugin in amazon-ssm-agent
Ssm Agent ยท 2026-10-21
Actions
Technical Details
| Affected Versions | 2.0.767.0 to 3.3.4364.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-81849 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update amazon-ssm-agent to version 3.3.4515.0 or later to address the path traversal vulnerability (CVE-2026-81849) and prevent potential security breaches.
For Platform Teams
Deploy the latest amazon-ssm-agent version 3.3.4515.0 across all instances to ensure security compliance and protect against the identified path traversal vulnerability.
For Executives
Implement the upgrade to amazon-ssm-agent version 3.3.4515.0 to mitigate the risk of arbitrary code execution due to the path traversal vulnerability identified as CVE-2026-81849.