{"id":"CVE-2026-122193","published":"2026-11-06T17:17:20.313","lastModified":"2026-11-06T21:17:07.030","description":"OS command injection in the example SSM document provisioning script in Trusted Remote Execution (REX) before 2026-07-28 might allow an authenticated remote user who is permitted to invoke the Rex-RO or Rex-RW SSM document to execute arbitrary commands as root on the managed instance, bypassing Cedar policy enforcement.\n\n\n\nTo remediate this issue, users should delete any Rex-RO and Rex-RW SSM documents created from the example script, in each account and Region where it was run.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-173-aws/","tags":[]},{"url":"https://github.com/trusted-remote-execution/trusted-remote-execution/security/advisories/GHSA-95g5-m242-wvhr","tags":[]}],"exploitRefs":[{"url":"https://github.com/trusted-remote-execution/trusted-remote-execution/security/advisories/GHSA-95g5-m242-wvhr","tags":[]}],"hasPoc":true,"ai":{"summary":"An OS command injection flaw exists in the example SSM document provisioning script for Trusted Remote Execution (REX) before 2026-07-28, allowing authenticated users with permission to invoke Rex-RO or Rex-RW documents to execute arbitrary commands as root on managed instances by bypassing Cedar policy enforcement.","exploitability":"Exploitation requires valid authentication and specific permissions to invoke the vulnerable SSM documents (Rex-RO or Rex-RW), but is otherwise straightforward for an attacker meeting those conditions.","blast_radius":"Successful exploitation grants root-level command execution on managed instances, enabling full compromise of affected systems, data exfiltration, lateral movement, and persistence.","remediation":"Delete all Rex-RO and Rex-RW SSM documents created from the example script in each AWS account and Region where it was run; no fixed version is specified beyond the date-based cutoff (2026-07-28), so immediate removal of affected documents is the only remediation provided.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["os-command-injection","ssm","aws","privilege-escalation","cedar-bypass"],"model":"garnet-coder","analyzedAt":"2026-11-07T09:43:47.374Z"}}