Is CVE-2026-119148 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-119148?

CVE-2026-119148 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-119148

Description

Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint. To remediate this issue, users should rebuild any custom enclave image against aws-nitro-enclaves-sdk-c 0.4.6.