Amazon ECS Container Agent for Windows versions 1.47.0 through 1.102.2 contains a command injection vulnerability in the FSx Windows File Server volume mounting process due to improper input validation of credentials. This flaw allows a remote authenticated attacker with permissions to register ECS task definitions or write to Secrets Manager or SSM Parameter Store credentials to execute shell commands with SYSTEM privileges on the host. The issue is fixed in version 1.103.0. ECS on Fargate is not affected.