CVE-2026-89049Disclosure

MEDIUMCVSS 8.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent (SSM Agent) before 3.3.4851.0 on all platforms might allow an authenticated remote user to bypass the remote destination denylist and reach link-local endpoints, potentially obtaining the temporary IAM role credentials of a managed instance and acting with that role's permissions from outside the instance, via a crafted destination host value that uses an alternate representation of a denied link-local address. To remediate this issue, users should upgrade to version 3.3.4851.0 or later.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-918CWE-1289

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
20 mentions across 7 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 7 signals
Technical details provided in 15 signals
Disclosure: 7 classified signals
General: 5 classified signals
Peaked 4d ago at 8 mentions (2026-09-14); latest day: 1
20 total mentions across 7 days

Deep dive

Activity timeline20 mentions / 7d

Signal classification4 categories

Disclosure

735.0%

Patch

735.0%

General

525.0%

Exploit

15.0%

Referenced assets13 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-11	4	Disclosure1General1Patch2
2026-09-12	2	General1Patch1
2026-09-14	8	Disclosure3Exploit1General3Patch1
2026-09-15	1	Disclosure1
2026-09-16	2	Disclosure2
2026-09-23	2	Patch2
2026-09-24	1	Patch1

Full discourse20 posts

nishikawaakira@nishikawaakira43d
Disclosure
AWS SSM agent に CVSS 9.9 の脆弱性（CVE-2026-89049）が出て実際にどんな感じなのか、攻撃を受けたかどうかの調査はどうやればいいのかの記事を書きました。結論として影響する組織はそんなに多くないのではないかなーと思っています https://zenn.dev/cscloud_blog/articles/4d6e13b853109e
Post summary
The text announces the discovery of CVE‑2026‑89049, a high‑severity vulnerability in AWS SSM agent with a CVSS score of 9.9, and describes an article that explains its characteristics and how to investigate potential attacks, while noting that few organizations are likely impacted.
011162498.4K
919 followersView on X
elhacker.NET@elhackernet42d
Disclosure
Vulnerabilidad en AWS Systems Manager permite saltar restricciones de reenvío de puertos Se ha detectado una vulnerabilidad crítica ( CVE-2026-89049 ) en el AWS Systems Manager Agent https://blog.elhacker.net/2026/09/vulnerabilidad-en-aws-systems-manager.html
Post summary
The text announces the discovery of a critical vulnerability (CVE-2026-89049) in AWS Systems Manager Agent allowing bypass of port forwarding restrictions, linking to a blog article for further details without mentioning patches, exploits, or active attacks.
024275194.7K
142.5K followersView on X
yousukezan@yousukezan43d
General
AWS SSM Agent の脆弱性(CVE-2026-89049) の被害があったかどうかを CloudTrail で確認する方法｜nishikawa https://zenn.dev/cscloud_blog/articles/4d6e13b853109e #zenn
Post summary
The text mentions CVE-2026-89049 in AWS SSM Agent and describes checking for damage via CloudTrail, but provides no PoC, exploit code, active exploitation, patch, or detailed vulnerability information.
010731.4K
16.5K followersView on X
nishikawaakira@nishikawaakira43d
General
無許可で私の画像使ってるw https://howsnip.com/how-to-detect-cve-2026-89049-attacks-using-aws-cloudtrail/
Post summary
The tweet mainly complains about unauthorized image use and includes a link whose slug references detecting CVE-2026-89049 attacks using AWS CloudTrail. Based on the tweet text alone, it lacks clear PoC, exploit, active exploitation, patch, technical vulnerability, or debunking details.
00071718
919 followersView on X
Rıdvan Yağlı@ridvanyagli46d
Patch
🔴 AWS Systems Manager Agent'da, Session Manager Remote Host Port Forwarding özelliğini etkileyen CVE-2026-89049 numaralı CVSS 9.9 Critical bir SSRF açığı bulundu. SSM Agent < 3.3.4851.0 sürümleri etkileniyor. Authenticated bir saldırgan, port-forwarding yetkisine sahipse, alternatif IP adres gösterimleriyle denylist'i aşarak instance'ın link-local servislerine erişebiliyor. Bu durum özellikle EC2 Instance Metadata Service üzerinden geçici IAM credentials elde edilmesine yol açabileceği için açığı kritik hale getiriyor. Saldırı zinciri şöyle: Authenticated User + Port-forwarding Permission -> SSM Session Manager -> Port Forwarding -> SSRF / Denylist Bypass -> Instance Metadata -> Temporary IAM Credentials -> AWS API erişimi Yamalanan sürüm: SSM Agent 3.3.4851.0 AWS üzerinde SSM/EC2 kullanan sistemlerde güncelleme yapılması gerekli. Güvenlik bülteni: https://aws.amazon.com/tr/security/security-bulletins/2026-107-aws/
Post summary
CVE-2026-89049 is a critical SSRF in AWS Systems Manager Agent enabling denial‑list bypass and temporary IAM credentials; users must upgrade to SSM Agent 3.3.4851.0 or newer.
00053861
2.4K followersView on X
雨燕@kyokutei_koyo42d
Disclosure
これか。 CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent https://aws.amazon.com/jp/security/security-bulletins/2026-107-aws/
Post summary
The text briefly discloses CVE-2026-89049 (SSRF in AWS SSM Agent Session Manager port forwarding) with a link to an AWS security bulletin, but provides no PoC, exploit, patch details, or active-exploitation evidence.
10020188
571 followersView on X
AWS Security Digest@AwsSecDigest42d
Exploit
🛎️ AWS Security Digest 278 is out! 1️⃣ CloudTrail hunting for the SSM Agent SSRF (CVE-2026-89049) by Akira Nishikawa 2️⃣ Breaking LiteLLM from auth bypass to cloud compromise by Amitai Cohen and Yaara Shriki 3️⃣ Machine speed, hold the AI: hand-rolled marimo exploit by Sysdig https://awssecuritydigest.com/past-issues/aws-security-digest-278
Post summary
AWS Security Digest 278 announces three security analyses: CloudTrail hunting for an SSM Agent SSRF (CVE–2026‑89049), an auth‑bypass leading to cloud compromise in LiteLLM, and a hand‑rolled marimo exploit, highlighting the release of functional exploit code.
11010245
1.7K followersView on X
Ujjaval@ParmarUjjaval341d
Disclosure
CloudTrail one-liner, CVE-2026-89049 check, no drama: aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=StartSession filter documentName AWS-StartPortForwardingSessionToRemoteHost. if host looks like another spelling of 169.254.169.254, that session is the ticket.
Post summary
The post discloses CVE-2026-89049 with a CloudTrail-based detection method involving StartSession and an AWS SSM port-forwarding document, focusing on identifying suspicious metadata-host sessions rather than exploitation, patching, or a named PoC.
0002072
232 followersView on X
セキュリティ対策Lab@securityLab_jp41d
Disclosure
AWS Systems Manager Agentに脆弱性 CVE-2026-89049　Session Managerの制限回避でIAM一時認証情報を取得される可能性 https://rocket-boys.co.jp/security-measures-lab/aws-ssm-agent-security-advisory-cve-2026-89049/ #セキュリティ対策Lab #security #securitynews #セキュリティ
Post summary
The tweet discloses CVE‑2026‑89049 in the AWS Systems Manager Agent, indicating that an attacker could obtain IAM temporary credentials by bypassing Session Manager restrictions.
00011260
684 followersView on X
CCB Alert@CCBalert41d
Disclosure
Warning: Critical #SSRF in #AWS SSM Agent. CVE-2026-89049 CVSS: 9.9. An authenticated attacker can bypass remote-host denylist protections and potentially obtain temporary IAM role credentials! https://aws.amazon.com/security/security-bulletins/2026-107-aws/ #Patch #Patch #Patch
Post summary
The tweet discloses a critical SSRF vulnerability in AWS SSM Agent (CVE-2026-89049, CVSS 9.9) that could allow authenticated attackers to obtain IAM role credentials, referencing an AWS security bulletin without mentioning exploits, patches, or active exploitation.
11000317
7.3K followersView on X
Sarcastic Sneaky@sarcasticsneaky44d
General
How to Detect CVE-2026-89049 Attacks Using AWS CloudTrail #Amazon #AWS #CloudTrail #CVE202689049 #CVE #Vulnerability #Exploit #Cloud #Hack #SSRF #SSMAgent #Howsnip #Guide #Blog https://howsnip.com/how-to-detect-cve-2026-89049-attacks-using-aws-cloudtrail/
Post summary
The tweet references a guide for detecting CVE-2026-89049 attacks via AWS CloudTrail, but contains no explicit PoC, exploit details, active exploitation evidence, patch information, or technical vulnerability specifics.
1001085
22 followersView on X
ExploitGrid@exploitgrid45d
General
🛡️ ExploitGrid Daily Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-68487 CVE-2026-68488 CVE-2026-89049 CVE-2026-89094 CVE-2026-52098 ..🧵👇
Post summary
The post simply lists several CVEs without providing any additional details, evidence of exploitation, or mitigation information.
1001064
42 followersView on X
iototsecnews@iototsecnews33d
Patch
AWS Systems Manager Agent の脆弱性 CVE-2026-89049 が FIX：ローカル・サービスへの不正アクセスの恐れ https://iototsecnews.jp/2026/09/14/aws-systems-manager-agent-vulnerability-allows-attackers-to-bypass-port-forwarding-restrictions/ AWS Systems Manager Agent において、ポートフォワーディング時の IP アドレス検証処理の不備に起因する脆弱性 CVE-2026-89049 が発見されました。攻撃者による接続先表記の迂回／リンクローカルアドレスへの不正アクセス／EC2 インスタンスの認証情報奪取／他クラウド資源への権限悪用といった影響が懸念されます。主な対応策は、エージェントのバージョン 3.3.4851.0 以降への更新／ポートフォワーディング用ドキュメントの利用制限／IAM ロールに対する最小権限の徹底／セッション履歴の監視です。システム環境の安全を確保するために、迅速なパッチ適用と設定の見直しが求められます。 #AWS #CVE202689049 #SystemsManagerAgent #Vulnerability
Post summary
The post announces CVE-2026-89049 in AWS Systems Manager Agent, detailing its impact and recommending an upgrade to version 3.3.4851.0 or later along with other mitigations.
00010129
515 followersView on X
雨燕@kyokutei_koyo42d
General
AWS SSM Agent の脆弱性(CVE-2026-89049) の被害があったかどうかを CloudTrail で確認する方法 https://zenn.dev/cscloud_blog/articles/4d6e13b853109e
Post summary
The text focuses on detecting damage from CVE-2026-89049 using AWS CloudTrail, without providing details on exploitation, patches, or PoC, making it a general informational post.
00010150
568 followersView on X
ExploitGrid@exploitgrid45d
Disclosure
[CVE] CVE-2026-89049 [HIGH PRIORITY] #Server-side request forgery in the Session Manager port forwarding functional... 🔗 https://exploitgrid.net/cve/CVE-2026-89049
Post summary
A high‑priority vulnerability, CVE‑2026‑89049, is disclosed as a server‑side request forgery in Session Manager port‑forwarding, with a link to exploitgrid for potential PoC details.
1000051
42 followersView on X
Upwind Security MDR@UpwindMDR46d
Patch
🚨Critical - AWS SSM Agent Session Manager Port Forwarding SSRF Denylist Bypass (CVE-2026-89049) Amazon AWS Systems Manager Agent (amazon-ssm-agent) Session Manager port forwarding improperly normalizes equivalent address representations, letting an authenticated user bypass the remote destination denylist and reach link-local endpoints (e.g., 169.254.169.254). This can expose managed instance temporary IAM role creds, enabling off-instance actions with that role’s permissions. 👉Affected: Amazon SSM Agent / http://github.com/aws/amazon-ssm-agent < 3.3.4851.0 | Upgrade to 3.3.4851.0
Post summary
A critical SSRF denylist bypass (CVE‑2026‑89049) in AWS SSM Agent lets authenticated users reach link‑local endpoints and potentially expose IAM role credentials; a patch is available—upgrade to version 3.3.4851.0.
00010114
304 followersView on X
Hazem Omier@hazemomier33d
Patch
ثغرة AWS SSM Agent (CVE-2026-89049): نسخ قبل 3.3.4851.0 — port-forward لـ remote host عدّى denylist العناوين الـ link-local بتمثيل بديل لـ 169.254، وصل IMDS، وسرق credentials رول الـ instance. ``` agent/user │ StartPortForwardingSessionToRemoteHost ▼ SSM Agent (unpatched) │ denylist miss (alt IP form) ▼ IMDS 169.254.x → temporary instance-role creds ``` من زاوية CTO: حدّث لـ ≥3.3.4851.0، راجع CloudTrail على StartSession + host، وضيّق ssm:StartSession. لو الـ agents تفتح جلسات SSM، دي داخل نصف قطر الانفجار عندك.
Post summary
The text discloses CVE-2026-89049, a port-forward denylist bypass in AWS SSM Agent allowing IMDS credential theft, and prioritizes remediation by specifying the fixed version (≥3.3.4851.0) and hardening steps.
0000068
436 followersView on X
Hazem Omier@hazemomier33d
Patch
SSM Agent CVE-2026-89049 (CVSS 9.9): authenticated AWS-StartPortForwardingSessionToRemoteHost bypassed the remote-host denylist with alternate 169.254 representations, reached IMDS, and could steal instance-role creds. CTO take: - Patch agents to ≥3.3.4851.0 now - Audit CloudTrail StartSession where documentName = AWS-StartPortForwardingSessionToRemoteHost — inspect host params, not just literal 169.254.169.254 - Scope ssm:StartSession; treat Session Manager like SSH to the box - If agents can open SSM sessions, this is in your blast radius Denylist without normalization is not a control plane.
Post summary
CVE-2026-89049 (SSM Agent, CVSS 9.9) is an authenticated bypass of the remote-host denylist using alternate 169.254 representations to reach IMDS and steal instance-role creds; a patched version ≥3.3.4851.0 is specified and immediate patching is urged.
0000040
436 followersView on X
The Daily Tech Feed@dailytechonx42d
Patch
Security alert: AWS Systems Manager Agent has a critical vulnerability (CVE-2026-89049) that permits bypassing port-forwarding restrictions to access link-local services including the EC2 Instance Metadata Service. Affected SSM Agent versions are < 3.3.4851.0. All users must update to version 3.3.4851.0 or later, lock down permissions for AWS-StartPortForwardingSessionToRemoteHost, audit IAM roles, and enforce least-privilege access. #SecurityNews #AWS #SSM #CloudSecurity #CVE2026 #IAM #AWS #CloudSecurity #Vulnerability #SSMAgent #IAM #CVE2026 https://thedailytechfeed.com/critical-aws-ssm-agent-flaw-lets-users-bypass-port-forwarding-rules/
Post summary
The text discloses CVE-2026-89049 affecting AWS SSM Agent versions below 3.3.4851.0, detailing how it allows bypassing port-forwarding restrictions to access the EC2 Instance Metadata Service, and provides an explicit patch instruction to update to version 3.3.4851.0 or later along with additional IAM mitigation steps.
0000096
732 followersView on X
NEXSIGHT@NEXSIGHTNEWS45d
Patch
AWS Systems Manager AgentにSSRFの脆弱性、CVSS 9.9 — ポートフォワーディング権限を持つ認証済み利用者がIAM認証情報を窃取可能、修正版3.3.4851.0を公開 https://cyber.nexsight.co/articles/2026/09/12/aws-ssm-agent-ssrf-cve-2026-89049-2026-09-12/
Post summary
AWS Systems Manager Agent is vulnerable to a critical SSRF flaw (CVSS 9.9) that lets authenticated users with port‑forwarding rights steal IAM credentials; a patched version (3.3.4851.0) has been released.
0000087
69 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-89049

nishikawaakira[verified]@nishikawaakiraDisclosure

The text announces the discovery of CVE‑2026‑89049, a high‑severity vulnerability in AWS SSM agent with a CVSS score of 9.9, and describes an article that explains its characteristics and how to investigate potential attacks, while noting that few organizations are likely impacted.

yousukezan[verified]@yousukezanGeneral

The text mentions CVE-2026-89049 in AWS SSM Agent and describes checking for damage via CloudTrail, but provides no PoC, exploit code, active exploitation, patch, or detailed vulnerability information.

nishikawaakira[verified]@nishikawaakiraGeneral

The tweet mainly complains about unauthorized image use and includes a link whose slug references detecting CVE-2026-89049 attacks using AWS CloudTrail. Based on the tweet text alone, it lacks clear PoC, exploit, active exploitation, patch, technical vulnerability, or debunking details.

Rıdvan Yağlı[verified]@ridvanyagliPatch

CVE-2026-89049 is a critical SSRF in AWS Systems Manager Agent enabling denial‑list bypass and temporary IAM credentials; users must upgrade to SSM Agent 3.3.4851.0 or newer.

セキュリティ対策Lab[verified]@securityLab_jpDisclosure

The tweet discloses CVE‑2026‑89049 in the AWS Systems Manager Agent, indicating that an attacker could obtain IAM temporary credentials by bypassing Session Manager restrictions.

Upwind Security MDR[verified]@UpwindMDRPatch

A critical SSRF denylist bypass (CVE‑2026‑89049) in AWS SSM Agent lets authenticated users reach link‑local endpoints and potentially expose IAM role credentials; a patch is available—upgrade to version 3.3.4851.0.

Hazem Omier[verified]@hazemomierPatch

The text discloses CVE-2026-89049, a port-forward denylist bypass in AWS SSM Agent allowing IMDS credential theft, and prioritizes remediation by specifying the fixed version (≥3.3.4851.0) and hardening steps.

Hazem Omier[verified]@hazemomierPatch

CVE-2026-89049 (SSM Agent, CVSS 9.9) is an authenticated bypass of the remote-host denylist using alternate 169.254 representations to reach IMDS and steal instance-role creds; a patched version ≥3.3.4851.0 is specified and immediate patching is urged.