PT-2026-54637 · Amazon · Aws Cli

Andrew Asseily · Published 2026-07-01 · Updated 2026-07-02 · CVE-2026-13769

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AWS CLI versions prior to 1.44.78 (v1) AWS CLI versions prior to 2.34.29 (v2)

Description On Unix-like systems where the umask is not configured to restrict file permissions, overly permissive file permissions may allow local users on the same host to read credentials. This occurs when certain CLI subcommands are used, specifically 'aws codeartifact login', 'aws iam create-virtual-mfa-device', and 'aws deploy register'.

Recommendations Upgrade to AWS CLI version 1.44.78 (v1) or later. Upgrade to AWS CLI version 2.34.29 (v2) or later.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2026-13769

Affected Products

Aws Cli

References · 6

• https://github.com/aws/aws-cli/releases/tag/1.44.78 · Patch
• https://github.com/aws/aws-cli/releases/tag/2.34.29 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-13769 · Security Note
• https://aws.amazon.com/security/security-bulletins/2026-049-aws · Vendor Advisory
• https://github.com/aws/aws-cli/security/advisories/GHSA-wfp6-f47h-hxc3 · Note
• https://twitter.com/eyalestrin/status/2072760543002407349 · Twitter Post