Read the docs
TI-2026-83210 Aliases CVE-2026-119148

Unvalidated parent-supplied AWS Region in aws-nitro-enclaves-sdk-c

Priority LOW 35CWE-807Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

AWS aws-nitro-enclaves-sdk-c from 0 before 0.4.6 contains incomplete string validation (CWE-807) that trusts parent-supplied input in a security decision. A third party able to influence that input can impersonate the AWS KMS endpoint used by the enclave, and the attacker needs local access with low privileges.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

Description from the CNA

Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint. To remediate this issue, users should rebuild any custom enclave image against aws-nitro-enclaves-sdk-c 0.4.6.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00174 6th percentileScored 2026-11-07
Fix Fixed aws-nitro-enclaves-sdk-c (AWS): 0.4.6

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AWSaws-nitro-enclaves-sdk-cbefore 0.4.60.4.6Patch availableCNA
  • aws-nitro-enclaves-sdk-c VendorAWS Affected before 0.4.6 Fixed in 0.4.6 Patch available CNA

Remediation

Rebuild any custom enclave image against aws-nitro-enclaves-sdk-c 0.4.6, which fixes the issue in AWS aws-nitro-enclaves-sdk-c before 0.4.6.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

  • Fix · CNA aws-nitro-enclaves-sdk-c (AWS) Fixed in 0.4.6

Timeline

  1. 2026-10-30 Threatist record created from CVE-2026-119148
  2. 2026-10-30 CISA SSVC decision points changed
  3. 2026-10-30 Priority changed: MEDIUM → LOW

References

Patch 1

Advisory 2

  • TI-2026-23989 crypto: algif_aead - Revert to operating out-of-place KEVCVSS 3.1HIGH 7.8
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2024-18648 Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM… CVSS 3.1CRITICAL 9.8
  • TI-2024-05929 Openssh: regresshion - race condition in ssh allows rce/dos CVSS 3.1HIGH 8.1
  • TI-2025-03847 Input validation issue in AWS Amplify Studio UI component properties CVSS 4.0CRITICAL 9.0
  • TI-2026-11603 HTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAF CVSS 4.0HIGH 7.9
See all 383 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences