---
id: "GHSA-f6f6-6f88-r57j"
kind: "vulnerability"
aliases: ["GHSA-f6f6-6f88-r57j"]
title: "CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C"
severity: "high"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["aws", "c", "infrastructure", "kms", "lab-disclosure", "nitro-enclaves"]
not_affected_if: ["no-kmstool-enclave", "sdk-version-above-0.4.5"]
published_at: "2026-10-30T00:00:00+00:00"
first_seen_at: "2026-10-30T16:50:06+00:00"
updated_at: "2026-10-30T16:50:30+00:00"
sources: [{"source": "lab", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-157-aws/", "first_seen_at": "2026-10-30T16:50:06+00:00"}]
---

# CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

The AWS Nitro Enclaves SDK for C and its kmstool-enclave example have a use-after-free reachable over vsock from the parent EC2 instance, which can corrupt enclave memory and run code inside the enclave. A second flaw lets a crafted region string make the enclave talk to an impostor KMS and accept forged responses, such as attacker-chosen key material.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the version of `aws-nitro-enclaves-sdk-c` used in your enclave image build.
- Check whether your enclave image includes `kmstool-enclave` or code derived from it.

## Fix

- `aws-nitro-enclaves-sdk-c` `v0.4.6`, then rebuild enclave images that consume the library.

## Timeline

- 2026-10-30T16:50:06+00:00 lab https://aws.amazon.com/security/security-bulletins/rss/2026-157-aws/ — AWS: CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

## Documents

- [advisory] AWS: CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C https://aws.amazon.com/security/security-bulletins/rss/2026-157-aws/

## From the sources

CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

### CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

Bulletin ID: 2026-157-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/30/2026 09:00 AM PDT

Description:

The AWS Nitro Enclaves SDK for C (aws-nitro-enclaves-sdk-c) is a library and set of example tools, including kmstool-enclave, for building applications that run inside AWS Nitro Enclaves and call AWS KMS using cryptographic attestation.

We identified CVE-2026-119116, a use-after-free in the SetClient command handler of the kmstool-enclave example application, where an application that executes on the parent EC2 instance could send crafted messages over vsock to corrupt heap memory inside the enclave and execute arbitrary code within it. Only enclave images that include kmstool-enclave, or code derived from it, are affected.

We also identified CVE-2026-119148, an input validation issue in the SDK library where the AWS KMS server name is built from a caller-supplied region string. A third party could supply a crafted region to impersonate KMS to the enclave and inject forged responses, such as actor-chosen key material.

Impacted versions: aws-nitro-enclaves-sdk-c <= v0.4.5 (CVE-2026-119116 affects kmstool-enclave only; CVE-2026-119148 affects the library)

Resolution:

Both issues have been addressed in aws-nitro-enclaves-sdk-c version v0.4.6. Customers who build enclave images which consume the aws-nitro-enclaves-sdk-c library should upgrade it to v0.4.6 and rebuild their enclave images.

Workarounds:

There are no workarounds. Upgrading is required.

References:

- CVE-2026-119116
- CVE-2026-119148
- GHSA-f6f6-6f88-r57j
- GHSA-cfhm-qfw4-j7qq

Acknowledgement:

We would like to thank Trail of Bits for reporting CVE-2026-119116 and collaborating on this issue through the coordinated vulnerability disclosure process.

 Please email aws-security@amazon.com with any security questions or concerns.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_