Threats affecting pkg:github/aws/amazon-ecs-agent

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.5%	CVE-2026-7461Amazon ECS Agent · OS Command Injection High7.2EPSS 0.5%2026-04-30CVE Database V5CVE-2026-7461 CVE-2026-7461 is a high-severity OS command injection vulnerability in the FSx Windows File Server volume mounting component of the Amazon ECS Agent on Windows versions before 1.103.0. It allows a remote authenticated attacker with permissions to register ECS task definitions or write to Secrets Manager or SSM Parameter Store credentials to execute shell commands with SYSTEM privileges on the host via a crafted username in an ECS task definition. AWS has released version 1.103.0 to remediate this issue. EPSS 0.5%Vulnerability AWS CWE-78	CVE Database V5	2026-04-30

Page 1 of 1