CVE-2026-18654
Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR cluster endpoint. To remediate this issue, users should upgrade to AWS CLI v1 1.45.28 or later, or AWS CLI v2 2.35.3 or later.
- Affected products
- Aws Cli
- Fix
- Available
- CVSS 4.0
- 6.9 MEDIUM
- CVSS 3.1
- 6.8 MEDIUM
- EPSS
- 0.3% (21th percentile)
- Weakness
- CWE-322
- NVD status
- Awaiting Analysis
- Published
- 2026-08-03
- Attack patterns
- CAPEC-94
CVE-2026-18654 at NVD
No indexed exploits for CVE-2026-18654 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-18654 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.