{"id":"CVE-2026-103958","published":"2026-10-02T19:16:40.040","lastModified":"2026-10-06T18:16:42.900","description":"Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafted connection address supplied when registering, updating or testing a tool server or remote agent.\n\n\n\nTo remediate this issue, users should upgrade to version 1.7.0 or later.","cvssScore":7.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-124-aws/","tags":[]},{"url":"https://github.com/awslabs/loom/releases/tag/v1.7.0","tags":[]},{"url":"https://github.com/awslabs/loom/security/advisories/GHSA-w6g6-h8pv-6mc7","tags":[]}],"exploitRefs":[{"url":"https://github.com/awslabs/loom/releases/tag/v1.7.0","tags":[]},{"url":"https://github.com/awslabs/loom/security/advisories/GHSA-w6g6-h8pv-6mc7","tags":[]}],"hasPoc":true,"ai":{"summary":"An authenticated attacker can exploit a server-side request forgery vulnerability in Loom for AWS to access internal network resources and potentially obtain container credentials. This allows lateral movement and data exfiltration within the internal network.","exploitability":"The exploit requires an authenticated user with access to tool server or remote agent registration functionality, making it moderately difficult to execute but not highly complex.","blast_radius":"If exploited, this vulnerability could allow attackers to read internal services, access sensitive data, and potentially escalate privileges by obtaining container credentials for the application's own role.","remediation":"Upgrade to Loom for AWS version 1.7.0 or later to remediate the server-side request forgery vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ssrf","aws","container"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:52:35.494Z"}}