CVE-2026-119116：AWS aws‑nitro‑enclaves‑sdk‑c kmstool‑enclave SetClient 命令處理程式發現 Use‑after‑free 漏洞
CVE-2026-119116 - Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c
AWS aws‑nitro‑enclaves‑sdk‑c 0.4.6 之前版本的 kmstool‑enclave 記憶體在 Use‑after‑free 漏洞，可能使 EC2 主機在 Nitro Enclave 內部執行任意程式。
此漏洞已被列為 CVSS 3.1 高風險，若未修補，可能導致 Nitro Enclave 內部任意程式碼執行，進一步威脅 AWS 服務安全。此漏洞可能允許 EC2 主機在 Nitro Enclave 內部執行任意程式，造成 enclave 內部任意程式碼執行風險。
A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an application that runs on the parent EC2 instance to corrupt heap memory inside a Nitro Enclave which may lead to arbitrary code execution within the enclave. To remediate this issue, users should rebuild any enclave image that includes kmstool-enclave, or code derived from it, against aws-nitro-enclaves-sdk-c 0.4.6.
Impact
Affected Products
The following products are affected by CVE-2026-119116
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | HIGH | ff89ba41-3aa1-4d27-914a-91399e9639e5 | ||||
| CVSS 4.0 | HIGH | ff89ba41-3aa1-4d27-914a-91399e9639e5 |
Rebuild enclaves against aws-nitro-enclaves-sdk-c version 0.4.6 or later.
- Rebuild enclave images using version 0.4.6.
- Update to aws-nitro-enclaves-sdk-c 0.4.6.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-119116 vulnerability anywhere in the article.
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.