Topic

SSM Agent

News, analysis and practical guidance on SSM Agent.

1 articleUpdated 28 Sep 2026

ThreatsCloud & SaaSHigh
AWS Systems Manager Agent SSRF Vulnerability Allows Link-Local IMDS Credential Theft CVE-2026-89049
AWS resolves a critical SSRF vulnerability in amazon-ssm-agent where port forwarding denylist bypasses permit link-local IMDS temporary credential exfiltration.
Aisha Noor28 Sep 20268 min read