CVE-2026-124033 · Package
NO FIX YET · SEE WHAT TO DO
The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before 3.16.0 contain a relative path traversal flaw. An attacker with write access to the log export S3 bucket can use a crafted object key to write files outside the intended directory, with names and content they control, using the privileges of the user running the command.
first public Nov 9, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running the AWS ParallelCluster CLI from PyPI (aws-parallelcluster) versions 3.0.0 up to but not including 3.16.0 that use the export-cluster-logs or export-image-logs commands. Exposure requires that someone other than the operator can write to the log export S3 bucket, so teams that restrict that bucket to trusted users have reduced risk.
Not affected if bucket-access-restricted-to-trusted-users, not-using-log-export-commands, version-3.16.0-or-later
Who cares aws, aws-parallelcluster, hpc, lab-disclosure, python
pip show aws-parallelcluster; versions >= 3.0.0 and < 3.16.0 are affected.export-cluster-logs or export-image-logs are used, and who can write to the S3 bucket used for log export.3.16.0CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI
Bulletin ID: 2026-174-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/09/2026 13:00 PM PST
Description:
AWS ParallelCluster CLI is an open source command line tool, distributed on PyPI as aws-parallelcluster, that customers use to create and manage HPC clusters on AWS.
We identified CVE-2026-124033, an issue where the export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a relative path traversal issue. An authenticated remote user with write access to the log export Amazon S3 bucket could use a crafted S3 object key to write files outside the intended export directory on the machine running the command. The written files would have names and content controlled by a third party, and would be created with the privileges of the user running the command.
Impacted versions: >= 3.0.0 AND < 3.16.0
Resolution:
This issue has been addressed in aws-parallelcluster version 3.16.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes
Workarounds:
Ensure the Amazon S3 bucket used for log export is accessible by only trusted users.
References:
Acknowledgement:
We would like to thank Mohamed Abdelaal (0xmrma) for collaborating on this issue through the coordinated vulnerability disclosure process.
Please email aws-security@amazon.com with any security questions or concerns.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.