{"id":"CVE-2026-126087","kind":"vulnerability","aliases":["CVE-2026-126087"],"related":[],"title":"Untrusted search path in the cross-user process launcher in Open Job Description (OpenJD) Sessions for Python before…","description":"CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent\n\n### CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent\n\nBulletin ID: 2026-177-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/10/2026 10:45 AM PST\n\n Description:\n\nAWS Deadline Cloud is a fully managed service for rendering and other compute-intensive workloads. The Deadline Cloud worker agent runs on fleet hosts. It uses Open Job Description (OpenJD) Sessions for Python, which is an open-source library, to run each job's actions as the queue's job user.\n\nWe identified CVE-2026-126087. On Linux, OpenJD Sessions switched to the job user by running sudo by its bare name, in an environment that the job controls. A job could add a directory to PATH and put its own executable named sudo there. That executable would then run as the worker agent OS user instead of the job user.\n\nAn authenticated user with permission to submit jobs to a queue could use this to run arbitrary code as the worker agent user. They could then obtain the AWS credentials that user holds, including fleet role credentials and EC2 instance identity credentials. On customer-managed fleets, they could also read or modify other queues' session data and queue role credentials on the same host.\n\nService-managed fleets were remediated service-side, and customers using them do not need to take any action. Customer-managed fleets running an affected worker agent version on Linux are affected. Windows workers are not affected.\n\nImpacted versions:\n\n- openjd-sessions < 0.11.0\n- deadline-cloud-worker-agent < 0.33.0\n\nResolution:\n\nThis issue is fixed in OpenJD Sessions for Python version 0.11.0 and in AWS Deadline Cloud worker agent version 0.33.0, which includes OpenJD Sessions 0.11.0. OpenJD Sessions now finds sudo and its other system commands in a fixed list of trusted directories and never looks them up through PATH.\n\nWe recommend upgrading to the latest worker agent version and making sure any forked or derivative code includes the new fixes. Customers who ran affected versions on customer-managed fleets should review AWS CloudTrail for unexpected activity by their fleet role and queue roles.\n\nWorkarounds:\n\nUpgrading is the only fix. No configuration setting removes the issue. Until a customer-managed fleet is upgraded, limit permission to submit jobs to its queues (deadline:CreateJob) to trusted principals.\n\nReferences:\n\n- CVE-2026-126087\n\n Please email aws-security@amazon.com with any s ecurity questions or concerns.","summary":"On Linux, OpenJD Sessions for Python ran sudo by bare name, so a job could place its own sudo executable on PATH and have it run as the worker agent OS user. An authenticated user allowed to submit jobs could then run arbitrary code and obtain the worker's AWS credentials.","severity":"critical","cvss":9.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aws","aws-deadline-cloud","lab-disclosure","linux","openjd-sessions","package","self-hosted","worker-agent"],"not_affected_if":["service-managed-fleets","windows-workers"],"how_to_check":"- Check the installed `openjd-sessions` version with `pip show openjd-sessions` and compare it to `0.11.0`.\n- Check the worker agent version (`deadline-cloud-worker-agent` package) against `0.33.0`.\n- Confirm whether any customer-managed fleets run Linux workers; service-managed fleets need no action.","fix":"- OpenJD Sessions for Python: `0.11.0`\n- AWS Deadline Cloud worker agent: `0.33.0` (includes OpenJD Sessions 0.11.0)","status":"open","published_at":"2026-11-10T19:21:13+00:00","first_seen_at":"2026-11-10T19:14:12+00:00","triaged_at":"2026-11-10T19:15:10+00:00","updated_at":"2026-11-10T19:25:15+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-11-10T19:15:10Z","model":"claude-haiku-5-5","output":{"fix":"- OpenJD Sessions for Python: `0.11.0`\n- AWS Deadline Cloud worker agent: `0.33.0` (includes OpenJD Sessions 0.11.0)","reach":"network","title":"AWS Deadline Cloud worker agent: job can run code as worker user on Linux","impact":"high","summary":"On Linux, OpenJD Sessions for Python ran sudo by bare name, so a job could place its own sudo executable on PATH and have it run as the worker agent OS user. An authenticated user allowed to submit jobs could then run arbitrary code and obtain the worker's AWS credentials.","audience":"businesses","category":"package","nicknames":[],"who_cares":["aws-deadline-cloud","openjd-sessions","worker-agent","linux","self-hosted"],"confidence":0.8,"fix_status":"available","needs_auth":"yes","worst_case":"job user gains worker agent credentials, including fleet role keys","analyst_note":"","how_to_check":"- Check the installed `openjd-sessions` version with `pip show openjd-sessions` and compare it to `0.11.0`.\n- Check the worker agent version (`deadline-cloud-worker-agent` package) against `0.33.0`.\n- Confirm whether any customer-managed fleets run Linux workers; service-managed fleets need no action.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["service-managed-fleets","windows-workers"],"who_is_affected":"Customer-managed AWS Deadline Cloud fleets running an affected worker agent on Linux are exposed, since an authenticated job submitter can plant a fake sudo on PATH. Service-managed fleets were fixed by AWS and need no action, and Windows workers are not affected. Teams whose fleets are all service-managed or on Windows can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000887,"input_tokens":5446,"output_tokens":684,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-126087':21A,24A,97C,115C,208C,511C '-177':134C '-2026':20A,23A,96C,114C,207C,510C '0.11.0':373C,391C,405C '0.33.0':379C,400C '10':146C '11/10/2026':145C '2026':133C '45':147C 'action':197C,348C 'activ':467C 'add':235C 'affect':355C,362C,367C,454C 'agent':43B,73B,112C,130C,171C,256C,285C,357C,378C,398C,437C 'allow':79B 'also':313C 'arbitrari':86B,280C 'attent':142C 'authent':77B,265C 'aw':25B,27B,93B,108C,126C,135C,137C,151C,292C,394C,463C 'aws-deadline-cloud':26B 'aws-security@amazon.com':514C 'bare':53B,223C 'bulletin':131C 'cloud':29B,110C,128C,153C,169C,376C,396C 'cloudtrail':464C 'code':87B,281C,446C 'command':415C 'comput':164C 'compute-intens':163C 'concern':521C 'configur':482C 'content':138C 'control':231C 'could':58B,83B,234C,275C,288C,312C 'createjob':504C 'credenti':94B,293C,300C,305C,324C 'cross':7A 'cross-us':6A 'custom':308C,339C,350C,451C,458C,490C 'customer-manag':307C,349C,457C,489C 'cve':19A,22A,95C,113C,206C,509C 'data':320C 'date':144C 'deadlin':28B,109C,127C,152C,168C,375C,395C,503C 'deadline-cloud-worker-ag':374C 'deriv':445C 'descript':14A,150C,180C 'directori':237C,422C 'disclosur':32B 'ec2':302C 'ecur':518C 'email':513C 'environ':227C 'execut':63B,244C,249C 'find':409C 'fix':384C,418C,450C,480C 'fleet':174C,298C,310C,332C,352C,460C,470C,492C 'fork':443C 'fulli':156C 'hold':296C 'host':40B,175C,328C 'id':132C 'ident':304C 'identifi':205C 'impact':368C 'import':140C 'includ':297C,402C,447C 'instanc':303C 'instead':259C 'intens':165C 'issu':382C,486C 'job':13A,57B,82B,179C,195C,202C,216C,230C,233C,262C,271C,499C 'lab':31B 'lab-disclosur':30B 'latest':435C 'launcher':10A 'librari':191C 'limit':495C 'linux':33B,45B,210C,360C 'list':419C 'look':425C 'make':440C 'manag':157C,309C,331C,351C,459C,491C 'modifi':316C 'name':54B,224C,245C 'need':344C 'never':424C 'new':449C 'obtain':89B,290C 'open':12A,178C,189C 'open-sourc':188C 'openjd':15A,35B,46B,102C,120C,181C,211C,371C,386C,403C,406C 'openjd-sess':34B,370C 'os':74B,257C 'packag':37B 'path':3A,65B,100C,118C,239C,429C 'permiss':268C,496C 'place':59B 'pleas':512C 'princip':507C 'process':9A 'pst':149C 'public':143C 'put':241C 'python':18A,49B,105C,123C,184C,389C 'question':519C 'queue':200C,274C,318C,322C,473C,502C 'ran':50B,453C 'read':314C 'recommend':431C 'refer':508C 'remedi':334C 'remov':484C 'render':160C 'requir':141C 'resolut':380C 'review':462C 'role':299C,323C,471C,474C 'run':69B,85B,172C,193C,219C,252C,279C,353C 'scope':136C 'search':2A,99C,117C 'self':39B 'self-host':38B 'servic':158C,330C,336C 'service-manag':329C 'service-sid':335C 'session':16A,36B,47B,103C,121C,182C,212C,319C,372C,387C,404C,407C 'set':483C 'side':337C 'sourc':190C 'submit':81B,270C,498C 'sudo':51B,62B,220C,246C,410C 'sure':441C 'switch':213C 'system':414C 'take':346C 'trust':421C,506C 'type':139C 'unexpect':466C 'untrust':1A,98C,116C 'upgrad':432C,476C,494C 'use':177C,276C,340C 'user':8A,75B,78B,203C,217C,258C,263C,266C,286C,295C 'version':358C,369C,390C,399C,438C,455C 'window':363C 'workaround':475C 'worker':42B,72B,91B,111C,129C,170C,255C,284C,356C,364C,377C,397C,436C 'worker-ag':41B 'workload':166C 'would':250C","nicknames":[],"mitigations":[],"who_affected":"Customer-managed AWS Deadline Cloud fleets running an affected worker agent on Linux are exposed, since an authenticated job submitter can plant a fake sudo on PATH. Service-managed fleets were fixed by AWS and need no action, and Windows workers are not affected. Teams whose fleets are all service-managed or on Windows can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aws","awsdeadlinecloud","critical","labdisclosure","linux","openjdsessions","package","selfhosted","workeragent"],"campaign_type":null,"search_a":"'-126087':21A,24A '-2026':20A,23A 'cross':7A 'cross-us':6A 'cve':19A,22A 'descript':14A 'job':13A 'launcher':10A 'open':12A 'openjd':15A 'path':3A 'process':9A 'python':18A 'search':2A 'session':16A 'untrust':1A 'user':8A","search_b":"'agent':43B,73B 'allow':79B 'arbitrari':86B 'authent':77B 'aw':25B,27B,93B 'aws-deadline-cloud':26B 'bare':53B 'cloud':29B 'code':87B 'could':58B,83B 'credenti':94B 'deadlin':28B 'disclosur':32B 'execut':63B 'host':40B 'job':57B,82B 'lab':31B 'lab-disclosur':30B 'linux':33B,45B 'name':54B 'obtain':89B 'openjd':35B,46B 'openjd-sess':34B 'os':74B 'packag':37B 'path':65B 'place':59B 'python':49B 'ran':50B 'run':69B,85B 'self':39B 'self-host':38B 'session':36B,47B 'submit':81B 'sudo':51B,62B 'user':75B,78B 'worker':42B,72B,91B 'worker-ag':41B","search_c":"'-126087':97C,115C,208C,511C '-177':134C '-2026':96C,114C,207C,510C '0.11.0':373C,391C,405C '0.33.0':379C,400C '10':146C '11/10/2026':145C '2026':133C '45':147C 'action':197C,348C 'activ':467C 'add':235C 'affect':355C,362C,367C,454C 'agent':112C,130C,171C,256C,285C,357C,378C,398C,437C 'also':313C 'arbitrari':280C 'attent':142C 'authent':265C 'aw':108C,126C,135C,137C,151C,292C,394C,463C 'aws-security@amazon.com':514C 'bare':223C 'bulletin':131C 'cloud':110C,128C,153C,169C,376C,396C 'cloudtrail':464C 'code':281C,446C 'command':415C 'comput':164C 'compute-intens':163C 'concern':521C 'configur':482C 'content':138C 'control':231C 'could':234C,275C,288C,312C 'createjob':504C 'credenti':293C,300C,305C,324C 'custom':308C,339C,350C,451C,458C,490C 'customer-manag':307C,349C,457C,489C 'cve':95C,113C,206C,509C 'data':320C 'date':144C 'deadlin':109C,127C,152C,168C,375C,395C,503C 'deadline-cloud-worker-ag':374C 'deriv':445C 'descript':150C,180C 'directori':237C,422C 'ec2':302C 'ecur':518C 'email':513C 'environ':227C 'execut':244C,249C 'find':409C 'fix':384C,418C,450C,480C 'fleet':174C,298C,310C,332C,352C,460C,470C,492C 'fork':443C 'fulli':156C 'hold':296C 'host':175C,328C 'id':132C 'ident':304C 'identifi':205C 'impact':368C 'import':140C 'includ':297C,402C,447C 'instanc':303C 'instead':259C 'intens':165C 'issu':382C,486C 'job':179C,195C,202C,216C,230C,233C,262C,271C,499C 'latest':435C 'librari':191C 'limit':495C 'linux':210C,360C 'list':419C 'look':425C 'make':440C 'manag':157C,309C,331C,351C,459C,491C 'modifi':316C 'name':224C,245C 'need':344C 'never':424C 'new':449C 'obtain':290C 'open':178C,189C 'open-sourc':188C 'openjd':102C,120C,181C,211C,371C,386C,403C,406C 'openjd-sess':370C 'os':257C 'path':100C,118C,239C,429C 'permiss':268C,496C 'pleas':512C 'princip':507C 'pst':149C 'public':143C 'put':241C 'python':105C,123C,184C,389C 'question':519C 'queue':200C,274C,318C,322C,473C,502C 'ran':453C 'read':314C 'recommend':431C 'refer':508C 'remedi':334C 'remov':484C 'render':160C 'requir':141C 'resolut':380C 'review':462C 'role':299C,323C,471C,474C 'run':172C,193C,219C,252C,279C,353C 'scope':136C 'search':99C,117C 'servic':158C,330C,336C 'service-manag':329C 'service-sid':335C 'session':103C,121C,182C,212C,319C,372C,387C,404C,407C 'set':483C 'side':337C 'sourc':190C 'submit':270C,498C 'sudo':220C,246C,410C 'sure':441C 'switch':213C 'system':414C 'take':346C 'trust':421C,506C 'type':139C 'unexpect':466C 'untrust':98C,116C 'upgrad':432C,476C,494C 'use':177C,276C,340C 'user':203C,217C,258C,263C,266C,286C,295C 'version':358C,369C,390C,399C,438C,455C 'window':363C 'workaround':475C 'worker':111C,129C,170C,255C,284C,356C,364C,377C,397C,436C 'workload':166C 'would':250C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T18:53:11+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"ff89ba41-3aa1-4d27-914a-91399e9639e5","poc_count":0,"sources":[{"source":"lab","external_id":"https://aws.amazon.com/security/security-bulletins/2026-177-aws/#CVE-2026-126087","url":"https://aws.amazon.com/security/security-bulletins/2026-177-aws/","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-10T19:14:12+00:00","fetched_at":"2026-11-10T19:14:12+00:00","note":"AWS: CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent"},{"source":"nvd","external_id":"CVE-2026-126087","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126087","severity":null,"published_at":"2026-11-10T19:21:13+00:00","modified_at":"2026-11-10T19:21:13+00:00","first_seen_at":"2026-11-10T19:25:15+00:00","fetched_at":"2026-11-10T19:25:35+00:00","note":null}],"documents":[{"id":117295,"url":"https://aws.amazon.com/security/security-bulletins/2026-177-aws/","title":"AWS: CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent","kind":"advisory","source":"lab","publisher":"research","text":"CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent\n\n### CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent\n\nBulletin ID: 2026-177-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/10/2026 10:45 AM PST\n\n Description:\n\nAWS Deadline Cloud is a fully managed service for rendering and other compute-intensive workloads. The Deadline Cloud worker agent runs on fleet hosts. It uses Open Job Description (OpenJD) Sessions for Python, which is an open-source library, to run each job's actions as the queue's job user.\n\nWe identified CVE-2026-126087. On Linux, OpenJD Sessions switched to the job user by running sudo by its bare name, in an environment that the job controls. A job could add a directory to PATH and put its own executable named sudo there. That executable would then run as the worker agent OS user instead of the job user.\n\nAn authenticated user with permission to submit jobs to a queue could use this to run arbitrary code as the worker agent user. They could then obtain the AWS credentials that user holds, including fleet role credentials and EC2 instance identity credentials. On customer-managed fleets, they could also read or modify other queues' session data and queue role credentials on the same host.\n\nService-managed fleets were remediated service-side, and customers using them do not need to take any action. Customer-managed fleets running an affected worker agent version on Linux are affected. Windows workers are not affected.\n\nImpacted versions:\n\n- openjd-sessions < 0.11.0\n- deadline-cloud-worker-agent < 0.33.0\n\nResolution:\n\nThis issue is fixed in OpenJD Sessions for Python version 0.11.0 and in AWS Deadline Cloud worker agent version 0.33.0, which includes OpenJD Sessions 0.11.0. OpenJD Sessions now finds sudo and its other system commands in a fixed list of trusted directories and never looks them up through PATH.\n\nWe recommend upgrading to the latest worker agent version and making sure any forked or derivative code includes the new fixes. Customers who ran affected versions on customer-managed fleets should review AWS CloudTrail for unexpected activity by their fleet role and queue roles.\n\nWorkarounds:\n\nUpgrading is the only fix. No configuration setting removes the issue. Until a customer-managed fleet is upgraded, limit permission to submit jobs to its queues (deadline:CreateJob) to trusted principals.\n\nReferences:\n\n- CVE-2026-126087\n\n Please email aws-security@amazon.com with any s ecurity questions or concerns.","published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":117428,"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-177-aws/","title":"AWS Security Bulletins: CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent","kind":"vendor","source":"vendor","publisher":null,"text":"CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent\n\nBulletin ID: 2026-177-AWS Publication Date: 11/10/2026 10:45 AM PST Description: Untrusted search path in the cross-user process launcher in Open Job Description (OpenJD) Sessions for Python before 0.11.0, as used in the AWS Deadline Cloud worker agent before 0.33.0, on Linux might allow an authenticated remote user with permission to submit jobs to a queue to execute arbitrary code as the worker agent OS user and obtain the AWS credentials held by the worker agent via a crafted job that modifies the PATH environment variable. Impacted versions: - openjd-sessions < 0.11.0 - deadline-cloud-worker-agent < 0.33.0 Refer to the article for the most up-to-date and complete information.","published_at":"2026-11-10T18:53:11+00:00","relation":"advisory","confidence":null,"note":"AWS Security Bulletins"},{"id":117512,"url":"https://github.com/OpenJobDescription/openjd-sessions-for-python/releases/tag/0.11.0","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":117513,"url":"https://github.com/aws-deadline/deadline-cloud-worker-agent/releases/tag/0.33.0","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}