{"id":"CVE-2026-119116","kind":"vulnerability","aliases":["CVE-2026-119116"],"related":[],"title":"A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of…","description":"CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C\n\n### CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C\n\nBulletin ID: 2026-157-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/30/2026 09:00 AM PDT\n\nDescription:\n\nThe AWS Nitro Enclaves SDK for C (aws-nitro-enclaves-sdk-c) is a library and set of example tools, including kmstool-enclave, for building applications that run inside AWS Nitro Enclaves and call AWS KMS using cryptographic attestation.\n\nWe identified CVE-2026-119116, a use-after-free in the SetClient command handler of the kmstool-enclave example application, where an application that executes on the parent EC2 instance could send crafted messages over vsock to corrupt heap memory inside the enclave and execute arbitrary code within it. Only enclave images that include kmstool-enclave, or code derived from it, are affected.\n\nWe also identified CVE-2026-119148, an input validation issue in the SDK library where the AWS KMS server name is built from a caller-supplied region string. A third party could supply a crafted region to impersonate KMS to the enclave and inject forged responses, such as actor-chosen key material.\n\nImpacted versions: aws-nitro-enclaves-sdk-c <= v0.4.5 (CVE-2026-119116 affects kmstool-enclave only; CVE-2026-119148 affects the library)\n\nResolution:\n\nBoth issues have been addressed in aws-nitro-enclaves-sdk-c version v0.4.6. Customers who build enclave images which consume the aws-nitro-enclaves-sdk-c library should upgrade it to v0.4.6 and rebuild their enclave images.\n\nWorkarounds:\n\nThere are no workarounds. Upgrading is required.\n\nReferences:\n\n- CVE-2026-119116\n- CVE-2026-119148\n- GHSA-f6f6-6f88-r57j\n- GHSA-cfhm-qfw4-j7qq\n\nAcknowledgement:\n\nWe would like to thank Trail of Bits for reporting CVE-2026-119116 and collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","summary":"The AWS Nitro Enclaves SDK for C and its example tool kmstool-enclave contain a use-after-free reachable from the parent EC2 instance over vsock, and a region-to-server-name flaw that lets a third party impersonate KMS to the enclave. An attacker can run code inside an affected enclave or inject forged KMS responses such as attacker-chosen key material.","severity":"high","cvss":8.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aws","c","enclave-images","kms","lab-disclosure","nitro-enclaves","package"],"not_affected_if":["no-nitro-enclaves","not-using-kmstool-enclave"],"how_to_check":"- Check the version of aws-nitro-enclaves-sdk-c your enclave images build against; affected versions are `<= v0.4.5`.\n- Check whether enclave images include kmstool-enclave or code derived from it.\n- Check whether the SDK library is used to call KMS from inside the enclave.","fix":"- aws-nitro-enclaves-sdk-c: upgrade to `v0.4.6` and rebuild enclave images","status":"open","published_at":"2026-10-30T00:00:00+00:00","first_seen_at":"2026-10-30T16:50:06+00:00","triaged_at":"2026-10-30T16:50:30+00:00","updated_at":"2026-10-30T17:31:39+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-30T16:50:30Z","model":"claude-haiku-5-5","output":{"fix":"- aws-nitro-enclaves-sdk-c: upgrade to `v0.4.6` and rebuild enclave images","reach":"local","title":"AWS Nitro Enclaves SDK for C: heap corruption and forged KMS responses in enclaves","impact":"high","summary":"The AWS Nitro Enclaves SDK for C and its example tool kmstool-enclave contain a use-after-free reachable from the parent EC2 instance over vsock, and a region-to-server-name flaw that lets a third party impersonate KMS to the enclave. An attacker can run code inside an affected enclave or inject forged KMS responses such as attacker-chosen key material.","audience":"businesses","category":"package","nicknames":[],"who_cares":["aws","nitro-enclaves","kms","c","enclave-images"],"confidence":0.7,"fix_status":"available","needs_auth":"unknown","worst_case":"code runs inside the enclave; KMS responses forged with attacker-chosen keys","analyst_note":"","how_to_check":"- Check the version of aws-nitro-enclaves-sdk-c your enclave images build against; affected versions are `<= v0.4.5`.\n- Check whether enclave images include kmstool-enclave or code derived from it.\n- Check whether the SDK library is used to call KMS from inside the enclave.","plain_action":"","needs_analyst":false,"not_affected_if":["no-nitro-enclaves","not-using-kmstool-enclave"],"who_is_affected":"Enclave images built with aws-nitro-enclaves-sdk-c at v0.4.5 or earlier are exposed. CVE-2026-119116 only affects images that include kmstool-enclave or code derived from it; CVE-2026-119148 affects any use of the library that builds the KMS server name from a caller-supplied region. Teams that do not run applications inside AWS Nitro Enclaves can skip it.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000836,"input_tokens":4898,"output_tokens":692,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-119116':25A,28A,111C,126C,204C,331C,394C,421C '-119148':115C,130C,271C,339C,397C '-157':142C '-2026':24A,27A,110C,114C,125C,129C,203C,270C,330C,338C,393C,396C,420C '00':155C '09':154C '10/30/2026':153C '2026':141C '6f88':401C 'acknowledg':408C 'actor':316C 'actor-chosen':315C 'address':348C 'affect':95B,265C,332C,340C 'also':267C 'applic':22A,186C,221C,224C 'arbitrari':247C 'attack':89B,105B 'attacker-chosen':104B 'attent':150C 'attest':199C 'aw':29B,43B,118C,133C,143C,145C,160C,167C,190C,195C,282C,323C,351C,367C 'aws-nitro-enclaves-sdk-c':166C,322C,350C,366C 'aws-security@amazon.com':435C 'bit':416C 'build':185C,360C 'built':287C 'bulletin':139C 'c':30B,48B,123C,138C,165C,171C,327C,355C,371C 'call':194C 'caller':291C 'caller-suppli':290C 'cfhm':405C 'chosen':106B,317C 'code':92B,248C,260C 'collabor':423C 'command':14A,213C 'concern':441C 'consum':364C 'contain':56B 'content':146C 'coordin':429C 'corrupt':239C 'could':232C,298C 'craft':234C,301C 'cryptograph':198C 'custom':358C 'cve':23A,26A,109C,113C,124C,128C,202C,269C,329C,337C,392C,395C,419C 'date':152C 'deriv':261C 'descript':158C 'disclosur':37B,431C 'doubl':8A 'double-fre':7A 'ec2':66B,230C 'email':434C 'enclav':20A,32B,40B,45B,55B,87B,96B,120C,135C,162C,169C,183C,192C,219C,244C,252C,258C,308C,325C,335C,353C,361C,369C,381C 'enclave-imag':31B 'exampl':51B,178C,220C 'execut':226C,246C 'f6f6':400C 'flaw':77B 'forg':99B,311C 'free':5A,9A,61B,209C 'ghsa':399C,404C 'ghsa-cfhm-qfw4-j7qq':403C 'ghsa-f6f6-6f88-r57j':398C 'handler':15A,214C 'heap':240C 'id':140C 'identifi':201C,268C 'imag':33B,253C,362C,382C 'impact':320C 'imperson':83B,304C 'import':148C 'includ':180C,255C 'inject':98B,310C 'input':273C 'insid':93B,189C,242C 'instanc':67B,231C 'issu':10A,116C,131C,275C,345C,426C 'j7qq':407C 'key':107B,318C 'kms':34B,84B,100B,196C,283C,305C 'kmstool':19A,54B,182C,218C,257C,334C 'kmstool-enclav':18A,53B,181C,217C,256C,333C 'lab':36B 'lab-disclosur':35B 'let':79B 'librari':174C,279C,342C,372C 'like':411C 'materi':108B,319C 'memori':241C 'messag':235C 'name':76B,285C 'nitro':39B,44B,119C,134C,161C,168C,191C,324C,352C,368C 'nitro-enclav':38B 'packag':41B 'parent':65B,229C 'parti':82B,297C 'pdt':157C 'pleas':433C 'process':432C 'public':151C 'qfw4':406C 'question':439C 'r57j':402C 'reachabl':62B 'rebuild':379C 'refer':391C 'region':73B,293C,302C 'region-to-server-nam':72B 'report':418C 'requir':149C,390C 'resolut':343C 'respons':101B,312C 'run':91B,188C 'sampl':21A 'scope':144C 'sdk':46B,121C,136C,163C,170C,278C,326C,354C,370C 'secur':438C 'send':233C 'server':75B,284C 'set':176C 'setclient':13A,212C 'string':294C 'suppli':292C,299C 'thank':413C 'third':81B,296C 'tool':52B,179C 'trail':414C 'type':147C 'upgrad':374C,388C 'use':3A,59B,197C,207C 'use-after-fre':2A,58B,206C 'v0.4.5':328C 'v0.4.6':357C,377C 'valid':274C 'version':321C,356C 'vsock':69B,237C 'vulner':430C 'within':249C 'workaround':383C,387C 'would':410C","nicknames":[],"mitigations":[],"who_affected":"Enclave images built with aws-nitro-enclaves-sdk-c at v0.4.5 or earlier are exposed. CVE-2026-119116 only affects images that include kmstool-enclave or code derived from it; CVE-2026-119148 affects any use of the library that builds the KMS server name from a caller-supplied region. Teams that do not run applications inside AWS Nitro Enclaves can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T00:00:00+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"ff89ba41-3aa1-4d27-914a-91399e9639e5","poc_count":0,"sources":[{"source":"lab","external_id":"https://aws.amazon.com/security/security-bulletins/rss/2026-157-aws/#CVE-2026-119116","url":"https://aws.amazon.com/security/security-bulletins/rss/2026-157-aws/","severity":null,"published_at":"2026-10-30T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-30T16:50:06+00:00","fetched_at":"2026-10-30T16:50:06+00:00","note":"AWS: CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C"},{"source":"nvd","external_id":"CVE-2026-119116","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119116","severity":null,"published_at":"2026-10-30T17:17:16+00:00","modified_at":"2026-10-30T17:17:16+00:00","first_seen_at":"2026-10-30T17:31:39+00:00","fetched_at":"2026-10-30T17:31:40+00:00","note":null}],"documents":[{"id":24698,"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-157-aws/","title":"AWS: CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C","kind":"advisory","source":"lab","publisher":"research","text":"CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C\n\n### CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C\n\nBulletin ID: 2026-157-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/30/2026 09:00 AM PDT\n\nDescription:\n\nThe AWS Nitro Enclaves SDK for C (aws-nitro-enclaves-sdk-c) is a library and set of example tools, including kmstool-enclave, for building applications that run inside AWS Nitro Enclaves and call AWS KMS using cryptographic attestation.\n\nWe identified CVE-2026-119116, a use-after-free in the SetClient command handler of the kmstool-enclave example application, where an application that executes on the parent EC2 instance could send crafted messages over vsock to corrupt heap memory inside the enclave and execute arbitrary code within it. Only enclave images that include kmstool-enclave, or code derived from it, are affected.\n\nWe also identified CVE-2026-119148, an input validation issue in the SDK library where the AWS KMS server name is built from a caller-supplied region string. A third party could supply a crafted region to impersonate KMS to the enclave and inject forged responses, such as actor-chosen key material.\n\nImpacted versions: aws-nitro-enclaves-sdk-c <= v0.4.5 (CVE-2026-119116 affects kmstool-enclave only; CVE-2026-119148 affects the library)\n\nResolution:\n\nBoth issues have been addressed in aws-nitro-enclaves-sdk-c version v0.4.6. Customers who build enclave images which consume the aws-nitro-enclaves-sdk-c library should upgrade it to v0.4.6 and rebuild their enclave images.\n\nWorkarounds:\n\nThere are no workarounds. Upgrading is required.\n\nReferences:\n\n- CVE-2026-119116\n- CVE-2026-119148\n- GHSA-f6f6-6f88-r57j\n- GHSA-cfhm-qfw4-j7qq\n\nAcknowledgement:\n\nWe would like to thank Trail of Bits for reporting CVE-2026-119116 and collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","published_at":"2026-10-30T00:00:00+00:00","relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}