Reported by 3 outlets
AWS AI Agent Vulnerabilities Let Attackers Bypass Authentication and Steal Credentials
Why this score
- Breadth
- 1.50 / 2.0 · 3 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 4.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.60 / 0.6 · time to second source
- Recency
- × 0.01 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.1 / 10 = base × recency + community
Desk analysis
AWS patched critical vulnerabilities in its open-source Loom AI agent orchestration platform and Amazon SageMaker Unified Studio. The flaws include CVE-2026-104019 and related authentication bypass and credential theft issues that allow unauthenticated administrative takeover, disclosure of OAuth2 tokens, temporary cloud credential access, and arbitrary code execution in another user's SageMaker environment. AWS urges users to upgrade Loom to version 1.7.0 and apply SageMaker security updates. The vulnerabilities combine authentication bypass with token theft, creating a high-impact chain for multi-tenant AI environments. Organizations running Loom or SageMaker should review access logs, rotate exposed tokens, and verify no unauthorized administrative access occurred.
Timeline
-
original reporting
AWS AI Agent Vulnerabilities Let Attackers Bypass Authentication and Steal Credentials
gbhackers.com · 10d ago · October 3rd, 2026
AWS has released security fixes for four vulnerabilities affecting its open-source Loom AI agent orchestration platform and Amazon SageMaker Unified Studio. The flaws could allow attackers to bypass authentication, steal OAuth2 tokens and temporary cloud credentials, access internal services, and execute arbitrary code in another user’s SageMaker environment. AWS disclosed the issues in security bulletins […] The post AWS AI Agent Vulnerabilities Let Attackers Bypass Authentication and Steal Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from radar.offseq.com
CVE-2026-104019: CRITICAL OS command injection in AWS SageMaker Distribution (CVSS 9.0) can let project contributors run arbitrary code & st
radar.offseq.com · 10d ago · October 3rd, 2026
CVE-2026-104019: CRITICAL OS command injection in AWS SageMaker Distribution (CVSS 9.0) can let project contributors run arbitrary code & st
via Mastodon https://radar.offseq.com/threat/cve-2026-104019-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-977760a40717075a
-
update from gbhackers.com
AWS Fixes AI Agent Flaws Enabling Authentication Bypass and Credential Theft
gbhackers.com · 8d ago · October 5th, 2026
These vulnerabilities could allow unauthenticated administrative takeover, disclosure of OAuth2 credentials, and access to internal services. The company strongly urges users to upgrade all Loom deployments and forks to version 1.7.0.
-
update from beyondmachines.net
AWS Labs Patches Critical Authentication Bypass in Loom AI Agent Platform AWS Labs fixed a critical CVSS 10.0 vulnerability in Loom that all
beyondmachines.net · 6d ago · October 7th, 2026
AWS Labs Patches Critical Authentication Bypass in Loom AI Agent Platform AWS Labs fixed a critical CVSS 10.0 vulnerability in Loom that all
via Mastodon https://beyondmachines.net/event_details/aws-labs-patches-critical-authentication-bypass-in-loom-ai-agent-platform-1-3-g-i-5/gD2P6Ple2L