What’s Vulnerable › Products

AWS tuftool vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your AWS tuftool version is affected

Latest AWS tuftool vulnerabilities

• CVE-2026-6968 — Multiple Path Traversal Variants in awslabs/tough (CVSS 6.5)
• CVE-2026-6967 — Missing Delegated Metadata Validation in awslabs/tough (CVSS 6.5)
• CVE-2026-6966 — Signature Threshold Bypass in awslabs/tough Delegated Roles (CVSS 6.5)