CVE-2026-115812: CWE-23 Relative path traversal in AWS multi-model-server
Description
Bulletin ID: 2026-148-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/23/2026 10:30 AM PDT Description: Amazon Web Services Multi Model Server (MMS) is an open source tool for serving machine learning models for inference. It was published by AWS on GitHub, PyPI, and Docker Hub, and reached end of life; its source repository has been archived and read-only since November 20, 2025. CVE-2026-115812: An issue in model archive extraction could allow a crafted model archive to write files outside the intended directory, potentially resulting in code execution with the privileges of the MMS process. CVE-2026-115813: An issue in the model download path could allow the MMS management interface to be directed to make requests to unintended network destinations. Impacted versions: <=1.1.11 (all released versions) Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin. Read this article
CVSS v3.1
Score 9.8critical
Affected software
AWS
multi-model-server
pkg:github/awslabs/multi-model-serverRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
AWS Multi Model Server (MMS) suffers from a CWE-23 relative path traversal vulnerability in the model archive extraction process. This flaw allows a crafted model archive to write files outside the intended extraction directory, which can lead to arbitrary code execution with the privileges of the MMS process. The vulnerability affects all released versions up to and including 1.1.11. MMS is an open source tool published by AWS for serving machine learning models and has reached end of life, with its source repository archived and read-only since November 20, 2025. AWS has published a security bulletin confirming the vulnerability and that a patch is available. Additionally, CVE-2026-115813 affects the model download path but is separate from this CVE. The CVSS v3.1 base score is 9.8, reflecting critical impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation of CVE-2026-115812 can result in arbitrary file writes outside the intended directory during model archive extraction, potentially leading to remote code execution with the privileges of the MMS process. This compromises the confidentiality, integrity, and availability of the affected system. Given MMS is used for serving machine learning models, this could allow attackers to execute malicious code on the hosting environment. The vulnerability affects all released versions up to 1.1.11. There are no known exploits in the wild at this time.
Mitigation Recommendations
A patch is available for this vulnerability. Since AWS Multi Model Server is a cloud-hosted service, AWS manages remediation for the service. Users should refer to the official AWS Security Bulletin (https://aws.amazon.com/security/security-bulletins/2026-148-aws/) for the latest remediation guidance and apply updates or mitigations as recommended. Given MMS has reached end of life and its repository is archived, users should consider migrating to supported alternatives. No additional vendor advisory states 'no action required' or 'already mitigated.'
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- AMZN
- Date Reserved
- 2026-10-23T16:08:53.411Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Is Cloud Service
- true
- Vendor Advisory Urls
- [{"url":"https://aws.amazon.com/security/security-bulletins/2026-148-aws/","vendor":"AWS"}]
Threat ID: 6adb9e84d73cc49347ad6668
Added to database: 10/23/2026, 17:51:00 UTC
Last enriched: 10/23/2026, 17:51:34 UTC
Last updated: 10/23/2026, 18:51:34 UTC
Views: 23
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.