AWS Systems Manager Agent Vulnerability Allows Attackers to Bypass Port-Forwarding Restrictions
Mon Sep 14 2026
Patch Management
Vulnerability
cybersecuritynews.com
A critical vulnerability in the AWS Systems Manager Agent could let authenticated attackers bypass remote-host port-forwarding restrictions and access sensitive link-local services, including the Amazon EC2 Instance Metadata Service. The flaw, tracked as CVE-2026-89049, affects Amazon SSM Agent versions earlier than 3.3.4851.0 and has been fixed in version 3.3.4851.0. AWS Systems Manager Agent runs on […]
The post AWS Systems Manager Agent Vulnerability Allows Attackers to Bypass Port-Forwarding Restrictions appeared first on Cyber Security News.