GHSA-fc67-c4hg-q653Published
OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-7461 · Microsoft / collected KEV context
cve-program · CVE-2026-7461
- https://github.com/aws/amazon-ecs-agent/releases/tag/v1.103.0
- https://aws.amazon.com/security/security-bulletins/2026-024-aws/
- https://github.com/aws/amazon-ecs-agent/security/advisories/GHSA-fc67-c4hg-q653
euvd · EUVD-2026-26412
- https://github.com/aws/amazon-ecs-agent/releases/tag/v1.103.0
- https://aws.amazon.com/security/security-bulletins/2026-024-aws/
- https://github.com/aws/amazon-ecs-agent/security/advisories/GHSA-fc67-c4hg-q653
nvd · CVE-2026-7461
- https://aws.amazon.com/security/security-bulletins/2026-024-aws/
- https://github.com/aws/amazon-ecs-agent/releases/tag/v1.103.0
- https://github.com/aws/amazon-ecs-agent/security/advisories/GHSA-fc67-c4hg-q653
osv · GHSA-fc67-c4hg-q653
- https://github.com/aws/amazon-ecs-agent/security/advisories/GHSA-fc67-c4hg-q653
- https://github.com/aws/amazon-ecs-agent
osv · GO-2026-5353
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.