--- id: "CVE-2026-126087" page: "https://infrastack.ai/live/CVE-2026-126087" kind: "vulnerability" aliases: ["CVE-2026-126087"] title: "Untrusted search path in the cross-user process launcher in Open Job Description (OpenJD) Sessions for Python before\u2026" severity: "critical" cvss: 9.4 epss: null exploited: false status: "open" category: "package" products: [] ecosystems: [] tags: ["aws", "aws-deadline-cloud", "lab-disclosure", "linux", "openjd-sessions", "package", "self-hosted", "worker-agent"] not_affected_if: ["service-managed-fleets", "windows-workers"] published_at: "2026-11-10T19:21:13+00:00" first_seen_at: "2026-11-10T19:14:12+00:00" updated_at: "2026-11-10T21:36:56+00:00" sources: [{"source": "lab", "url": "https://aws.amazon.com/security/security-bulletins/2026-177-aws/", "first_seen_at": "2026-11-10T19:14:12+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126087", "first_seen_at": "2026-11-10T19:25:15+00:00"}] exploit_sources: [] --- # Untrusted search path in the cross-user process launcher in Open Job Description (OpenJD) Sessions for Python before… Link for people: https://infrastack.ai/live/CVE-2026-126087 (this .md is for agents) On Linux, OpenJD Sessions for Python ran sudo by bare name, so a job could place its own sudo executable on PATH and have it run as the worker agent OS user. An authenticated user allowed to submit jobs could then run arbitrary code and obtain the worker's AWS credentials. _Summary, check and fix written by a model from the sources; labelled as such._ ## How to check - Check the installed `openjd-sessions` version with `pip show openjd-sessions` and compare it to `0.11.0`. - Check the worker agent version (`deadline-cloud-worker-agent` package) against `0.33.0`. - Confirm whether any customer-managed fleets run Linux workers; service-managed fleets need no action. ## Fix - OpenJD Sessions for Python: `0.11.0` - AWS Deadline Cloud worker agent: `0.33.0` (includes OpenJD Sessions 0.11.0) ## Mitigated for you by - Team (workaround): covers Limits who can submit jobs to the affected queues, reducing exposure to the untrusted PATH sudo execution Limits: Does not remove the issue; trusted principals with deadline:CreateJob can still exploit it Still: Limit deadline:CreateJob permission on the queues to trusted principals until the fleet is upgraded https://aws.amazon.com/security/security-bulletins/2026-177-aws/ - AWS (platform-fix, since 2026-11-10): covers Service-managed fleets, which were remediated service-side by AWS Limits: Customer-managed fleets, which must be upgraded by the customer Still: None required for service-managed fleets https://aws.amazon.com/security/security-bulletins/2026-177-aws/ ## Timeline - 2026-11-10T19:14:12+00:00 lab https://aws.amazon.com/security/security-bulletins/2026-177-aws/ — AWS: CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent - 2026-11-10T19:25:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126087 ## Documents - [advisory] AWS: CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent https://aws.amazon.com/security/security-bulletins/2026-177-aws/ - [advisory] AWS Security Bulletins: CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent https://aws.amazon.com/security/security-bulletins/rss/2026-177-aws/ - [fix] Release notes: github.com https://github.com/OpenJobDescription/openjd-sessions-for-python/releases/tag/0.11.0 - [fix] Release notes: github.com https://github.com/aws-deadline/deadline-cloud-worker-agent/releases/tag/0.33.0 ## From the sources CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent ### CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent Bulletin ID: 2026-177-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/10/2026 10:45 AM PST Last Updated Date: 11/10/2026 13:30 PM PST Description: AWS Deadline Cloud is a fully managed service for rendering and other compute-intensive workloads. The Deadline Cloud worker agent runs on fleet hosts. It uses Open Job Description (OpenJD) Sessions for Python, which is an open-source library, to run each job's actions as the queue's job user. We identified CVE-2026-126087. On Linux, OpenJD Sessions switched to the job user by running sudo by its bare name, in an environment that the job controls. A job could add a directory to PATH and put its own executable named sudo there. That executable would then run as the worker agent OS user instead of the job user. An authenticated user with permission to submit jobs to a queue could use this to run arbitrary code as the worker agent user. They could then obtain the AWS credentials that user holds, including fleet role credentials and EC2 instance identity credentials. On customer-managed fleets, they could also read or modify other queues' session data and queue role credentials on the same host. Service-managed fleets were remediated service-side, and customers using them do not need to take any action. Customer-managed fleets running an affected worker agent version on Linux are affected. Windows workers are not affected. Impacted versions: - openjd-sessions < 0.11.0 - deadline-cloud-worker-agent < 0.33.0 Resolution: This issue is fixed in OpenJD Sessions for Python version 0.11.0 and in AWS Deadline Cloud worker agent version 0.33.0, which includes OpenJD Sessions 0.11.0. OpenJD Sessions now finds sudo and its other system commands in a fixed list of trusted directories and never looks them up through PATH. We recommend upgrading to the latest worker agent version and making sure any forked or derivative code includes the new fixes. Customers who ran affected versions on customer-managed fleets should review AWS CloudTrail for unexpected activity by their fleet role and queue roles. Workarounds: Upgrading is the only fix. No configuration setting removes the issue. Until a customer-managed fleet is upgraded, limit permission to submit jobs to its queues (deadline:CreateJob) to trusted principals. References: - CVE-2026-126087 - GHSA-g25v-j45m-7425 Please email aws-security@amazon.com with any s ecurity questions or concerns. --- _Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_