CVE-2026-18654
Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR cluster endpoint. To remediate this issue, users should upgrade to AWS CLI v1 1.45.28 or later, or AWS CLI v2 2.35.3 or later.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.9
- CVSS vector
- CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
- EPSS probability
- 0.29%
- CWE
- CWE-322
- Published
- 2026-08-03
- Last modified
- 2026-08-04
Affected products
- AWS aws-cli
Weakness type
Related vulnerabilities
- CVE-2026-58065 — Apache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verification
- CVE-2026-45361 — Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)
- CVE-2026-44467 — Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions
- CVE-2026-1354 — Zero Motorcycles Firmware Key Exchange without Entity Authentication
- CVE-2025-13914 — Apstra: SSH host key validation vulnerability for managed devices
- CVE-2026-33697 — CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys
- CVE-2026-1709 — Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication
- CVE-2025-62501 — SSH Hostkey Misconfiguration Vulnerability in TP-Link Archer AX53