Advisoriesby IbisAWSAWS-2026-112
Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM...
No fix yet
Bulletin ID: 2026-112-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/14/2026 10:45 AM PDT Description: Temporary Elevated Access Management (TEAM) is an open source AWS sample solution for managing temporary elevated access via AWS IAM Identity Center. We identified CVE-2026-86830, where an authenticated user with application-level access could gain unintended temporary elevated access to AWS accounts managed by TEAM. Impacted versions: <1.5.1 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Changes since it was listed
Severity: Unrated to High
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Severity from
- NVD
More AWS advisories
All AWS
Code Injection via Improper Triple-Quote Escaping in AgentCore CLI Bedrock Agent ImportCVE-2026-11393no fix yetPotential denial of service when configured to send Retry packets in s2n-quicCVE-2026-94450no fix yetMissing Authorization in AmazonConnectSalesforceLambda sfExecuteAWSServiceCVE-2026-94384no fix yetImproper validation of certificate with host mismatch in AWS IoT Device SDK for PythonCVE-2026-92943no fix yetImproper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKSCVE-2026-86831no fix yetKiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace ConfigurationCVE-2026-89332no fix yet