CVE-2026-81849

Amazon SSM Agent Path Traversal Flaw Enables Root Host Takeover via Malicious S3 Object Keys

AWS resolves high-severity CVSS 8.8 flaw CVE-2026-81849 in amazon-ssm-agent where crafted S3 object keys allow authenticated IAM actors to overwrite root host files.