{"id":"GHSA-fc67-c4hg-q653","revision":null,"records":[{"revision":"58de38b657ad49bf908e13e519bdab84","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-7461","aliases":[],"title":"OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials","description":"Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allow a remote authenticated threat actor to execute shell commands with SYSTEM privileges on the underlying host via a specially crafted username field in an ECS task definition. This issue requires permissions to register ECS task definitions or write to the Secrets Manager or SSM Parameter Store credentials used by the FSx volume configuration.\n\nTo remediate this issue, users should upgrade to version 1.103.0.","state":0,"publishedAt":"2026-04-30T18:35:17.599+00:00","modifiedAt":"2026-05-01T03:56:01.01+00:00","affected":[{"ecosystem":"Vendor product","name":"Amazon ECS Agent","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"AWS\",\n                    \"product\": \"Amazon ECS Agent\",\n                    \"platforms\": [\n                        \"Windows\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"1.47.0\",\n                            \"lessThanOrEqual\": \"1.102.0\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","score":7.2,"severity":"HIGH"},{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":7.5,"severity":"HIGH"}],"references":["https://github.com/aws/amazon-ecs-agent/releases/tag/v1.103.0","https://aws.amazon.com/security/security-bulletins/2026-024-aws/","https://github.com/aws/amazon-ecs-agent/security/advisories/GHSA-fc67-c4hg-q653"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-7461","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-7461","identifiers":["CVE-2026-7461"]},"retained":false,"historicalAffected":[]},{"revision":"be811a4924404796bc0506a5c8c1deff","observedAt":"2026-10-28T09:40:39.566+00:00","statement":{"source":"euvd","id":"EUVD-2026-26412","aliases":["CVE-2026-7461"],"title":"Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allow a remote authenticated threat actor to execute shell commands…","description":"Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allow a remote authenticated threat actor to execute shell commands with SYSTEM privileges on the underlying host via a specially crafted username field in an ECS task definition. This issue requires permissions to register ECS task definitions or write to the Secrets Manager or SSM Parameter Store credentials used by the FSx volume configuration.\n\nTo remediate this issue, users should upgrade to version 1.103.0.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":7.5,"severity":null}],"references":["https://github.com/aws/amazon-ecs-agent/releases/tag/v1.103.0","https://aws.amazon.com/security/security-bulletins/2026-024-aws/","https://github.com/aws/amazon-ecs-agent/security/advisories/GHSA-fc67-c4hg-q653"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26412","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Apr 30, 2026, 6:35:17 PM","dateUpdated":"May 1, 2026, 3:56:01 AM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-26412","identifiers":["EUVD-2026-26412","CVE-2026-7461"]},"retained":false,"historicalAffected":[]},{"revision":"3c2d0b900bf54c76a3853a2ede1cfaa3","observedAt":"2026-10-27T15:46:47.989+00:00","statement":{"source":"nvd","id":"CVE-2026-7461","aliases":[],"title":"Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allow a remote authenticated threat actor to execute shell commands…","description":"Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allow a remote authenticated threat actor to execute shell commands with SYSTEM privileges on the underlying host via a specially crafted username field in an ECS task definition. This issue requires permissions to register ECS task definitions or write to the Secrets Manager or SSM Parameter Store credentials used by the FSx volume configuration.\n\nTo remediate this issue, users should upgrade to version 1.103.0.","state":0,"publishedAt":"2026-04-30T19:16:10.737+00:00","modifiedAt":"2026-10-26T21:10:00.17+00:00","affected":[],"metrics":[{"system":"CVSS 4.0 · ff89ba41-3aa1-4d27-914a-91399e9639e5 · Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","score":7.5,"severity":"HIGH"},{"system":"CVSS 3.1 · ff89ba41-3aa1-4d27-914a-91399e9639e5 · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","score":7.2,"severity":"HIGH"}],"references":["https://aws.amazon.com/security/security-bulletins/2026-024-aws/","https://github.com/aws/amazon-ecs-agent/releases/tag/v1.103.0","https://github.com/aws/amazon-ecs-agent/security/advisories/GHSA-fc67-c4hg-q653"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-7461","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Analyzed","weaknesses":["CWE-78"],"productCriteria":["cpe:2.3:a:amazon:amazon_ecs_container_agent:*:*:*:*:*:*:*:*"],"sourceDates":{"published":"2026-04-30T19:16:10.737","lastModified":"2026-10-26T21:10:00.170"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2026-7461","identifiers":["CVE-2026-7461"]},"retained":false,"historicalAffected":[]},{"revision":"ff6d0cabc85340708d241bf19bb7e4b2","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-fc67-c4hg-q653","aliases":["CVE-2026-7461","GO-2026-5353"],"title":"Amazon ECS Container Agent (Windows) is vulnerable to Information Disclosure","description":"### Summary\n[Amazon Elastic Container Service (Amazon ECS)](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/Welcome.html) is a fully managed container orchestration service that enables customers to deploy, manage, and scale containerized applications. An issue exists where, under certain circumstances, improper input validation in the FSx Windows File Server volume mounting process allows command injection through specially crafted credentials. \n\n### Impact\nImproper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before 1.103.0 might allow a remote authenticated threat actor to execute shell commands with SYSTEM privileges on the underlying host via a specially crafted username field in an ECS task definition. This issue requires permissions to register ECS task definitions or write to the Secrets Manager or SSM Parameter Store credentials used by the FSx volume configuration.\n\n\nTo remediate this issue, users should upgrade to version 1.103.0.\n\n**Impacted versions**: Version 1.47.0 through 1.102.2 of the ECS Agent for Windows\n\n### Patches\nThis issue only impacts ECS Windows worker instances. ECS on Fargate is not affected. This issue has been addressed in ECS agent version 1.103.0.  Amazon ECS recommends [upgrading](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_window-container_instance.html) to the [latest](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-windows-ami-versions.html) Amazon ECS-optimized Windows AMI with an updated ECS agent version.\n\n### Workarounds\nCustomers who cannot update to the latest AMI can restrict ecs:RegisterTaskDefinition permissions to trusted IAM principals only and restrict write access to Secrets Manager secrets referenced in FSx volume configurations.\n\n### References\nIf you have any questions or comments about this advisory, Amazon ECS asks that users contact [AWS/Amazon] Security via [vulnerability reporting page](https://aws.amazon.com/security/vulnerability-reporting) or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue.\n\n### Acknowledgement\n\nAmazon ECS would like to thank Sachin Patil for collaborating on this issue through the coordinated vulnerability disclosure process.","state":0,"publishedAt":"2026-05-07T01:22:45+00:00","modifiedAt":"2026-07-08T08:26:21.3125902+00:00","affected":[{"ecosystem":"Go","name":"github.com/aws/amazon-ecs-agent","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.47.0"},{"kind":"fixed","version":"1.103.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://github.com/aws/amazon-ecs-agent/security/advisories/GHSA-fc67-c4hg-q653","https://github.com/aws/amazon-ecs-agent"],"sourceUrl":"https://github.com/advisories/GHSA-fc67-c4hg-q653","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-fc67-c4hg-q653","identifiers":["GHSA-fc67-c4hg-q653","CVE-2026-7461","GO-2026-5353"]},"retained":false,"historicalAffected":[]},{"revision":"8784367779d5407895503b67adb1b538","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5353","aliases":["CVE-2026-7461","GHSA-fc67-c4hg-q653"],"title":"Amazon ECS Container Agent (Windows) is vulnerable to Information Disclosure in github.com/aws/amazon-ecs-agent","description":"Amazon ECS Container Agent (Windows) is vulnerable to Information Disclosure in github.com/aws/amazon-ecs-agent","state":0,"publishedAt":"2026-06-25T18:43:19+00:00","modifiedAt":"2026-07-08T08:26:21.3125902+00:00","affected":[{"ecosystem":"Go","name":"github.com/aws/amazon-ecs-agent","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.47.0"},{"kind":"fixed","version":"1.103.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/aws/amazon-ecs-agent/security/advisories/GHSA-fc67-c4hg-q653"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5353","license":"OSV · upstream source license applies","key":"osv:GO-2026-5353","identifiers":["GO-2026-5353","CVE-2026-7461","GHSA-fc67-c4hg-q653"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-10-30T03:49:20.9459112+00:00","complete":true,"records":1764,"lastAttemptAt":"2026-10-30T03:49:20.9459112+00:00","lastSuccessAt":"2026-10-30T03:49:21.0956195+00:00","error":null,"lastVerifiedAt":"2026-10-30T03:49:21.0956209+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-7e2c4e7288f2c464ad8c61f3bb6017374714faedcc781283ac06a706ee1a820b-31f63acb545dc1dc83bfd29d704f05b1f9bcf49861d98da742d3d09d4feba239","complete":true,"records":416818,"lastAttemptAt":"2026-10-30T03:48:58.3782708+00:00","lastSuccessAt":"2026-10-30T03:48:58.3604559+00:00","error":null,"lastVerifiedAt":"2026-10-30T03:48:58.3782708+00:00","snapshotPublishedAt":"2026-10-30T03:26:48+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-88fe0b1aa80645bf9d69475adeb3cab6","complete":false,"records":13518,"lastAttemptAt":"2026-10-30T04:01:31.5435945+00:00","lastSuccessAt":"2026-10-30T04:01:31.539+00:00","error":"15 identifier lookups failed; latest failures include HTTP 403. Other identifiers were checked independently.","lastVerifiedAt":"2026-10-30T04:01:31.539+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13136,"expectedIdentifiers":13601,"failedIdentifiers":15},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-10-30T03:49:20.9459112+00:00","complete":true,"records":1094,"lastAttemptAt":"2026-10-30T03:49:20.9459112+00:00","lastSuccessAt":"2026-10-30T03:49:21.0964525+00:00","error":null,"lastVerifiedAt":"2026-10-30T03:49:21.0964527+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-dff131a3390246408db17133f034dc7f","complete":true,"records":13541,"lastAttemptAt":"2026-10-30T03:49:22.1579892+00:00","lastSuccessAt":"2026-10-30T03:49:22.155+00:00","error":null,"lastVerifiedAt":"2026-10-30T03:49:22.155+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13601,"expectedIdentifiers":13601,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-ed3d9cf8b8585536fcb9b5cdf9f82e66117dc54e56de651034444f578191d1cf","complete":true,"records":9806,"lastAttemptAt":"2026-10-30T03:49:17.9057093+00:00","lastSuccessAt":"2026-10-30T03:49:17.6553909+00:00","error":null,"lastVerifiedAt":"2026-10-30T03:49:17.9057093+00:00","snapshotPublishedAt":"2026-10-30T03:03:06+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-2de9ccc5290f060c7aa63f89c25dd76f655a64ba1aba7c05c97fa3bee4f09899","complete":true,"records":1967,"lastAttemptAt":"2026-10-30T03:48:58.4335698+00:00","lastSuccessAt":"2026-10-28T20:55:34.2982937+00:00","error":null,"lastVerifiedAt":"2026-10-30T03:48:58.4335698+00:00","snapshotPublishedAt":"2026-10-28T20:03:08+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-3d73c87158b66efc3d2abd577048eff6d8962b9b8404ac23159c8b20cd3852a7","complete":true,"records":3014,"lastAttemptAt":"2026-10-30T03:49:20.9154714+00:00","lastSuccessAt":"2026-10-30T03:49:20.7978659+00:00","error":null,"lastVerifiedAt":"2026-10-30T03:49:20.9154714+00:00","snapshotPublishedAt":"2026-10-30T03:03:06+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-ec5b13e78c39945726a720832da7660d2774969f16e2a34f99460c135811abd5","complete":true,"records":230948,"lastAttemptAt":"2026-10-30T03:48:58.6037653+00:00","lastSuccessAt":"2026-10-29T22:50:35.0693267+00:00","error":null,"lastVerifiedAt":"2026-10-30T03:48:58.6037653+00:00","snapshotPublishedAt":"2026-10-29T22:33:13+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}