Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allow a remote authenticated threat actor to execute shell commands with SYSTEM privileges on the underlying host via a specially crafted username field in an ECS task definition. This issue requires permissions to register ECS task definitions or write to the Secrets Manager or SSM Parameter Store credentials used by the FSx volume configuration. To remediate this issue, users should upgrade to version 1.103.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-7461 Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 m… https://www.cve.org/CVERecord?id=CVE-2026-7461
Post summary
The text links to CVE-2026-7461, briefly describing an OS command injection issue in Amazon ECS Agent before version 1.103.0, but does not provide further details on exploits, patches or active use.
CVE-2026-7461 Remote Code Execution in Amazon ECS Agent FSx Windows File... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7461 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet announces the CVE-2026-7461 vulnerability in Amazon ECS Agent, indicating it as a remote code execution flaw, but it provides no further details such as PoC, exploit code, or patches.
🚨*CVE* CVE-2026-7461 Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 m… https://www.cve.org/CVERecord?id=CVE-2026-7461 ----- Traducción: CVE-2026-7461 Neu… http://infoflow.cloud`
Post summary
CVE‑2026‑7461 is a flaw in Amazon ECS Agent for Windows that permits arbitrary OS command execution via improperly neutralized inputs in the FSx Windows File Server volume mounting component. The announcement supplies technical details but no PoC, exploit code, patch, or reports of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | amazon | amazon_ecs_container_agent | - | - | - |