CVE-2026-13769CWE-732

CVE-2026-13769

Medium · published July 1, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
5.4
In the wild
Unconfirmed
What it is

Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where the umask has not been configured to restrict file permissions (the default on most systems) may allow other local users on the same host to read credentials written by certain CLI subcommands (aws codeartifact login, aws iam create-virtual-mfa-device, aws deploy register).

To remediate this issue, users should upgrade to AWS CLI 1.44.78 (v1) or 2.34.29 (v2) or later.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00164 · 5.4th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2026-07-01T23:16Z
Affected products (2)
ProductVersionsFixed in
amazon/aws_command_line_interface< 1.44.781.44.78
amazon/aws_command_line_interface≥ 2.0.0, < 2.34.292.34.29
References (4)
https://aws.amazon.com/security/security-bulletins/2026-049-aws/ · ff89ba41-3aa1-4d27-914a-91399e9639e5https://github.com/aws/aws-cli/releases/tag/1.44.78 · ff89ba41-3aa1-4d27-914a-91399e9639e5https://github.com/aws/aws-cli/releases/tag/2.34.29 · ff89ba41-3aa1-4d27-914a-91399e9639e5https://github.com/aws/aws-cli/security/advisories/GHSA-wfp6-f47h-hxc3 · ff89ba41-3aa1-4d27-914a-91399e9639e5
EPSS history
Timeline
  • 01 JUL 18:34Z
    Overly permissive File Permissions in AWS CLI
    cvelistv5