AWS Fixes AI Agent Flaws Enabling Authentication Bypass and Credential Theft
AWS patched Loom AI-agent flaws that can bypass authentication, leak OAuth tokens, and expose cloud credentials.
68
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenSep 18, 2026
- Last mentionedOct 5, 2026
Timeline
3 articles · newest firstAWS AI Agent Vulnerabilities Let Attackers Bypass Authentication and Steal Credentials
AWS patched four Loom and SageMaker flaws enabling auth bypass, token theft, SSRF, and cross-user command execution.
74
Grok Voice Transcribe 2.0
xAI releases Grok Voice Transcribe 2.0, claiming top streaming transcription accuracy, twice v1.0's accuracy at unchanged pricing.
45
Related CVEs
by mentions- CVE-2026-1039562%10.0Missing authentication in Loom for AWS control plane
- OS Command Injection in Amazon SageMaker Distribution
- Authenticated SSRF in Loom for AWS before 1.7.0
- OAuth2 discovery SSRF in Loom for AWS
Appears with
- AWSorganization · 2
- AWSvendor · 2
- Amazon SageMaker Unified Studioproduct · 2
- Grok Voice Transcribe 2.0ai model · 1
- Grok Voice Transcribe 2.0product · 1
- Atlassianvendor · 1
- Atlassianorganization · 1
- Grok Voiceai model · 1
- Grok Voice Transcribe 1.0ai model · 1
- xAIorganization · 1
- Teslaorganization · 1
- Teslaproduct · 1
- Amazon Cognitoproduct · 1
- AWS Labsorganization · 1
- Cursorproduct · 1
- xAIvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.