Topic

CVE-2026-89049

News, analysis and practical guidance on CVE-2026-89049.

1 articleUpdated 28 Sep 2026

ThreatsCloud & SaaSHigh
AWS Systems Manager Agent SSRF Vulnerability Allows Link-Local IMDS Credential Theft CVE-2026-89049
AWS resolves a critical SSRF vulnerability in amazon-ssm-agent where port forwarding denylist bypasses permit link-local IMDS temporary credential exfiltration.
Aisha Noor28 Sep 20268 min read