What’s Vulnerable › Products

AWS Amazon SSM Agent vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your AWS Amazon SSM Agent version is affected

Latest AWS Amazon SSM Agent vulnerabilities

• CVE-2026-89049 — Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent (CVSS 9.9)
• CVE-2022-29527 — (CVSS 7.0)