{"id":"CVE-2026-107322","published":"2026-10-08T19:16:59.857","lastModified":"2026-10-08T20:17:31.590","description":"An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent context.\n\n\n\nTo remediate this issue, users should upgrade to databases-on-aws plugin version 1.7.1 or later and verify that the updated plugin is active in each environment where it is used.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-184"],"vendors":[],"products":[],"references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-130-aws/","tags":[]},{"url":"https://github.com/awslabs/agent-plugins/commit/8b13a503746a4ebb0402b936645163224058bde3","tags":[]},{"url":"https://github.com/awslabs/agent-plugins/pull/232","tags":[]}],"exploitRefs":[{"url":"https://github.com/awslabs/agent-plugins/commit/8b13a503746a4ebb0402b936645163224058bde3","tags":[]},{"url":"https://github.com/awslabs/agent-plugins/pull/232","tags":[]}],"hasPoc":true,"ai":{"summary":"A vulnerability in Amazon Agent Plugins for AWS databases-on-aws plugin allows remote attackers to execute arbitrary OS commands on the host system by crafting malicious database command values. This represents a high-severity security flaw that could lead to full system compromise.","exploitability":"Exploitation is relatively straightforward as it requires only sending a crafted database command value to the agent, with no authentication required and minimal preconditions needed.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary commands on the host system running the AWS database agent, potentially leading to complete system compromise and data exfiltration across all databases managed by that agent.","remediation":"Upgrade to databases-on-aws plugin version 1.7.1 or later","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","aws","database","command-injection"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:21:51.877Z"}}