{"id":"CVE-2026-124033","kind":"vulnerability","aliases":["CVE-2026-124033"],"related":[],"title":"The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain…","description":"CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI\n\n### CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI\n\nBulletin ID: 2026-174-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/09/2026 13:00 PM PST\n\n Description:\n\nAWS ParallelCluster CLI is an open source command line tool, distributed on PyPI as aws-parallelcluster, that customers use to create and manage HPC clusters on AWS.\n\nWe identified CVE-2026-124033, an issue where the export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a relative path traversal issue. An authenticated remote user with write access to the log export Amazon S3 bucket could use a crafted S3 object key to write files outside the intended export directory on the machine running the command. The written files would have names and content controlled by a third party, and would be created with the privileges of the user running the command.\n\nImpacted versions: >= 3.0.0 AND < 3.16.0\n\nResolution:\n\nThis issue has been addressed in aws-parallelcluster version 3.16.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes\n\nWorkarounds:\n\nEnsure the Amazon S3 bucket used for log export is accessible by only trusted users.\n\nReferences:\n\n- CVE-2026-124033\n- GHSA-h79v-mp93-644r\n\nAcknowledgement:\n\nWe would like to thank Mohamed Abdelaal (0xmrma) for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","summary":"The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before 3.16.0 contain a relative path traversal flaw. An attacker with write access to the log export S3 bucket can use a crafted object key to write files outside the intended directory, with names and content they control, using the privileges of the user running the command.","severity":"medium","cvss":6.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aws","aws-parallelcluster","hpc","lab-disclosure","package","python"],"not_affected_if":["bucket-access-restricted-to-trusted-users","not-using-log-export-commands","version-3.16.0-or-later"],"how_to_check":"- Check the installed version with `pip show aws-parallelcluster`; versions `>= 3.0.0` and `< 3.16.0` are affected.\n- Check whether the log export commands `export-cluster-logs` or `export-image-logs` are used, and who can write to the S3 bucket used for log export.","fix":"- aws-parallelcluster `3.16.0`\n- Upgrade to the latest version and patch any forked or derivative code.","status":"open","published_at":"2026-11-09T22:18:38+00:00","first_seen_at":"2026-11-09T23:46:36+00:00","triaged_at":"2026-11-09T23:48:03+00:00","updated_at":"2026-11-10T00:28:47+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-11-09T23:48:03Z","model":"claude-haiku-5-5","output":{"fix":"- aws-parallelcluster `3.16.0`\n- Upgrade to the latest version and patch any forked or derivative code.","reach":"network","title":"AWS ParallelCluster CLI: crafted S3 key writes files outside export directory","impact":"medium","summary":"The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before 3.16.0 contain a relative path traversal flaw. An attacker with write access to the log export S3 bucket can use a crafted object key to write files outside the intended directory, with names and content they control, using the privileges of the user running the command.","audience":"developers","category":"package","nicknames":[],"who_cares":["aws-parallelcluster","python","hpc","aws"],"confidence":0.8,"fix_status":"available","needs_auth":"yes","worst_case":"files written outside export directory with attacker-controlled names and content","analyst_note":"","how_to_check":"- Check the installed version with `pip show aws-parallelcluster`; versions `>= 3.0.0` and `< 3.16.0` are affected.\n- Check whether the log export commands `export-cluster-logs` or `export-image-logs` are used, and who can write to the S3 bucket used for log export.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["bucket-access-restricted-to-trusted-users","not-using-log-export-commands","version-3.16.0-or-later"],"who_is_affected":"Teams running the AWS ParallelCluster CLI from PyPI (aws-parallelcluster) versions 3.0.0 up to but not including 3.16.0 that use the export-cluster-logs or export-image-logs commands. Exposure requires that someone other than the operator can write to the log export S3 bucket, so teams that restrict that bucket to trusted users have reduced risk.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000852,"input_tokens":5119,"output_tokens":681,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124033':23A,26A,102C,117C,182C,329C '-174':133C '-2026':22A,25A,101C,116C,181C,328C '00':146C '0xmrma':343C '11/09/2026':144C '13':145C '2026':132C '3.0.0':274C '3.16.0':19A,54B,204C,276C,288C '644r':334C 'abdela':342C 'access':65B,217C,321C 'acknowledg':335C 'address':282C 'amazon':222C,313C 'attack':62B 'attent':141C 'authent':212C 'aw':14A,27B,29B,50B,112C,127C,134C,136C,150C,165C,177C,199C,285C 'aws-parallelclust':28B,164C,284C 'aws-security@amazon.com':357C 'bucket':71B,224C,315C 'bulletin':130C 'cli':16A,52B,114C,129C,152C,201C 'cluster':4A,40B,175C,189C 'code':302C 'collabor':345C 'command':11A,47B,99B,110C,125C,157C,196C,245C,271C 'concern':363C 'contain':20A,55B,205C 'content':88B,137C,253C 'control':90B,254C 'coordin':351C 'could':225C 'craft':75B,228C 'creat':171C,262C 'custom':168C 'cve':21A,24A,100C,115C,180C,327C 'date':143C 'deriv':301C 'descript':149C 'directori':84B,239C 'disclosur':34B,353C 'distribut':160C 'email':356C 'ensur':297C,311C 'export':3A,8A,39B,44B,69B,109C,124C,188C,193C,221C,238C,319C 'export-cluster-log':2A,38B,187C 'export-image-log':7A,43B,192C 'file':80B,234C,248C 'fix':309C 'flaw':60B 'fork':299C 'ghsa':331C 'ghsa-h79v-mp93-644r':330C 'h79v':332C 'hpc':31B,174C 'id':131C 'identifi':179C 'imag':9A,45B,194C 'impact':272C 'import':139C 'incorpor':306C 'intend':83B,237C 'issu':184C,210C,279C,348C 'key':77B,231C 'lab':33B 'lab-disclosur':32B 'latest':294C 'like':338C 'line':158C 'log':5A,10A,41B,46B,68B,108C,123C,190C,195C,220C,318C 'machin':242C 'manag':173C 'moham':341C 'mp93':333C 'name':86B,251C 'new':308C 'object':76B,230C 'open':155C 'outsid':81B,235C 'packag':35B 'parallelclust':15A,30B,51B,113C,128C,151C,166C,200C,286C 'parti':258C 'patch':304C 'path':58B,104C,119C,208C 'pleas':355C 'pm':147C 'privileg':93B,265C 'process':354C 'pst':148C 'public':142C 'pypi':162C 'python':36B 'question':361C 'recommend':290C 'refer':326C 'relat':57B,103C,118C,207C 'remot':213C 'requir':140C 'resolut':277C 'run':97B,243C,269C 's3':70B,223C,229C,314C 'scope':135C 'secur':360C 'sourc':156C 'thank':340C 'third':257C 'tool':159C 'travers':59B,105C,120C,209C 'trust':324C 'type':138C 'upgrad':291C 'use':73B,91B,169C,226C,316C 'user':96B,214C,268C,325C 'version':18A,203C,273C,287C,295C 'vulner':352C 'workaround':310C 'would':249C,260C,337C 'write':64B,79B,216C,233C 'written':247C","nicknames":[],"mitigations":[],"who_affected":"Teams running the AWS ParallelCluster CLI from PyPI (aws-parallelcluster) versions 3.0.0 up to but not including 3.16.0 that use the export-cluster-logs or export-image-logs commands. Exposure requires that someone other than the operator can write to the log export S3 bucket, so teams that restrict that bucket to trusted users have reduced risk.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aws","awsparallelcluster","hpc","labdisclosure","medium","package","python"],"campaign_type":null,"search_a":"'-124033':23A,26A '-2026':22A,25A '3.16.0':19A 'aw':14A 'cli':16A 'cluster':4A 'command':11A 'contain':20A 'cve':21A,24A 'export':3A,8A 'export-cluster-log':2A 'export-image-log':7A 'imag':9A 'log':5A,10A 'parallelclust':15A 'version':18A","search_b":"'3.16.0':54B 'access':65B 'attack':62B 'aw':27B,29B,50B 'aws-parallelclust':28B 'bucket':71B 'cli':52B 'cluster':40B 'command':47B,99B 'contain':55B 'content':88B 'control':90B 'craft':75B 'directori':84B 'disclosur':34B 'export':39B,44B,69B 'export-cluster-log':38B 'export-image-log':43B 'file':80B 'flaw':60B 'hpc':31B 'imag':45B 'intend':83B 'key':77B 'lab':33B 'lab-disclosur':32B 'log':41B,46B,68B 'name':86B 'object':76B 'outsid':81B 'packag':35B 'parallelclust':30B,51B 'path':58B 'privileg':93B 'python':36B 'relat':57B 'run':97B 's3':70B 'travers':59B 'use':73B,91B 'user':96B 'write':64B,79B","search_c":"'-124033':102C,117C,182C,329C '-174':133C '-2026':101C,116C,181C,328C '00':146C '0xmrma':343C '11/09/2026':144C '13':145C '2026':132C '3.0.0':274C '3.16.0':204C,276C,288C '644r':334C 'abdela':342C 'access':217C,321C 'acknowledg':335C 'address':282C 'amazon':222C,313C 'attent':141C 'authent':212C 'aw':112C,127C,134C,136C,150C,165C,177C,199C,285C 'aws-parallelclust':164C,284C 'aws-security@amazon.com':357C 'bucket':224C,315C 'bulletin':130C 'cli':114C,129C,152C,201C 'cluster':175C,189C 'code':302C 'collabor':345C 'command':110C,125C,157C,196C,245C,271C 'concern':363C 'contain':205C 'content':137C,253C 'control':254C 'coordin':351C 'could':225C 'craft':228C 'creat':171C,262C 'custom':168C 'cve':100C,115C,180C,327C 'date':143C 'deriv':301C 'descript':149C 'directori':239C 'disclosur':353C 'distribut':160C 'email':356C 'ensur':297C,311C 'export':109C,124C,188C,193C,221C,238C,319C 'export-cluster-log':187C 'export-image-log':192C 'file':234C,248C 'fix':309C 'fork':299C 'ghsa':331C 'ghsa-h79v-mp93-644r':330C 'h79v':332C 'hpc':174C 'id':131C 'identifi':179C 'imag':194C 'impact':272C 'import':139C 'incorpor':306C 'intend':237C 'issu':184C,210C,279C,348C 'key':231C 'latest':294C 'like':338C 'line':158C 'log':108C,123C,190C,195C,220C,318C 'machin':242C 'manag':173C 'moham':341C 'mp93':333C 'name':251C 'new':308C 'object':230C 'open':155C 'outsid':235C 'parallelclust':113C,128C,151C,166C,200C,286C 'parti':258C 'patch':304C 'path':104C,119C,208C 'pleas':355C 'pm':147C 'privileg':265C 'process':354C 'pst':148C 'public':142C 'pypi':162C 'question':361C 'recommend':290C 'refer':326C 'relat':103C,118C,207C 'remot':213C 'requir':140C 'resolut':277C 'run':243C,269C 's3':223C,229C,314C 'scope':135C 'secur':360C 'sourc':156C 'thank':340C 'third':257C 'tool':159C 'travers':105C,120C,209C 'trust':324C 'type':138C 'upgrad':291C 'use':169C,226C,316C 'user':214C,268C,325C 'version':203C,273C,287C,295C 'vulner':352C 'workaround':310C 'would':249C,260C,337C 'write':216C,233C 'written':247C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T21:09:29+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"ff89ba41-3aa1-4d27-914a-91399e9639e5","poc_count":0,"sources":[{"source":"lab","external_id":"https://aws.amazon.com/security/security-bulletins/rss/2026-174-aws/#CVE-2026-124033","url":"https://aws.amazon.com/security/security-bulletins/rss/2026-174-aws/","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-09T23:46:36+00:00","fetched_at":"2026-11-09T23:46:36+00:00","note":"AWS: CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI"},{"source":"nvd","external_id":"CVE-2026-124033","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124033","severity":null,"published_at":"2026-11-09T22:18:38+00:00","modified_at":"2026-11-09T22:18:38+00:00","first_seen_at":"2026-11-10T00:28:47+00:00","fetched_at":"2026-11-10T00:28:47+00:00","note":null}],"documents":[{"id":110030,"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-174-aws/","title":"AWS: CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI","kind":"vendor","source":"vendor","publisher":"research","text":"CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI\n\n### CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI\n\nBulletin ID: 2026-174-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/09/2026 13:00 PM PST\n\n Description:\n\nAWS ParallelCluster CLI is an open source command line tool, distributed on PyPI as aws-parallelcluster, that customers use to create and manage HPC clusters on AWS.\n\nWe identified CVE-2026-124033, an issue where the export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a relative path traversal issue. An authenticated remote user with write access to the log export Amazon S3 bucket could use a crafted S3 object key to write files outside the intended export directory on the machine running the command. The written files would have names and content controlled by a third party, and would be created with the privileges of the user running the command.\n\nImpacted versions: >= 3.0.0 AND < 3.16.0\n\nResolution:\n\nThis issue has been addressed in aws-parallelcluster version 3.16.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes\n\nWorkarounds:\n\nEnsure the Amazon S3 bucket used for log export is accessible by only trusted users.\n\nReferences:\n\n- CVE-2026-124033\n- GHSA-h79v-mp93-644r\n\nAcknowledgement:\n\nWe would like to thank Mohamed Abdelaal (0xmrma) for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","published_at":"2026-11-09T21:12:17+00:00","relation":"mentions","confidence":null,"note":null},{"id":112120,"url":"https://github.com/aws/aws-parallelcluster/releases/tag/v3.16.0","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":112121,"url":"https://github.com/aws/aws-parallelcluster/security/advisories/GHSA-h79v-mp93-644r","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-11-09T21:09:29+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}