{"id":"GHSA-h79v-mp93-644r","kind":"vulnerability","aliases":["GHSA-h79v-mp93-644r"],"related":[],"title":"CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI","description":"CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI\n\n### CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI\n\nBulletin ID: 2026-174-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/09/2026 13:00 PM PST\n\n Description:\n\nAWS ParallelCluster CLI is an open source command line tool, distributed on PyPI as aws-parallelcluster, that customers use to create and manage HPC clusters on AWS.\n\nWe identified CVE-2026-124033, an issue where the export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a relative path traversal issue. An authenticated remote user with write access to the log export Amazon S3 bucket could use a crafted S3 object key to write files outside the intended export directory on the machine running the command. The written files would have names and content controlled by a third party, and would be created with the privileges of the user running the command.\n\nImpacted versions: >= 3.0.0 AND < 3.16.0\n\nResolution:\n\nThis issue has been addressed in aws-parallelcluster version 3.16.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes\n\nWorkarounds:\n\nEnsure the Amazon S3 bucket used for log export is accessible by only trusted users.\n\nReferences:\n\n- CVE-2026-124033\n- GHSA-h79v-mp93-644r\n\nAcknowledgement:\n\nWe would like to thank Mohamed Abdelaal (0xmrma) for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","summary":"The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before 3.16.0 allow a relative path traversal via a crafted S3 object key. An attacker with write access to the log export bucket can write files outside the intended directory, with names and content they control, using the privileges of the user running the command.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aws","aws-parallelcluster","hpc","lab-disclosure","package","python"],"not_affected_if":["bucket-restricted-to-trusted-users","no-log-export-usage","version-3.16.0-or-later"],"how_to_check":"- Check the installed version with `pcluster version` or `pip show aws-parallelcluster`; versions below `3.16.0` (and from `3.0.0`) are affected.\n- Check whether the log export S3 bucket is writable by anyone beyond trusted users.","fix":"- aws-parallelcluster `3.16.0`\n- Forked or derivative code should also be patched with the new fixes, per the vendor.","status":"open","published_at":null,"first_seen_at":"2026-11-09T23:46:36+00:00","triaged_at":"2026-11-09T23:48:03+00:00","updated_at":"2026-11-09T23:48:03+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-11-09T23:48:03Z","model":"claude-haiku-5-5","output":{"fix":"- aws-parallelcluster `3.16.0`\n- Forked or derivative code should also be patched with the new fixes, per the vendor.","reach":"network","title":"AWS ParallelCluster CLI: crafted S3 key writes files outside export directory","impact":"medium","summary":"The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before 3.16.0 allow a relative path traversal via a crafted S3 object key. An attacker with write access to the log export bucket can write files outside the intended directory, with names and content they control, using the privileges of the user running the command.","audience":"businesses","category":"package","nicknames":[],"who_cares":["aws","python","hpc","aws-parallelcluster"],"confidence":0.8,"fix_status":"available","needs_auth":"yes","worst_case":"Attacker writes arbitrary files on the machine running the CLI","analyst_note":"","how_to_check":"- Check the installed version with `pcluster version` or `pip show aws-parallelcluster`; versions below `3.16.0` (and from `3.0.0`) are affected.\n- Check whether the log export S3 bucket is writable by anyone beyond trusted users.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["version-3.16.0-or-later","no-log-export-usage","bucket-restricted-to-trusted-users"],"who_is_affected":"Teams that run the AWS ParallelCluster CLI (aws-parallelcluster on PyPI) below 3.16.0 and use the export-cluster-logs or export-image-logs commands. Exposure depends on who can write to the log export S3 bucket; if only trusted users can, the risk is reduced, as the vendor's workaround states.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000839,"input_tokens":5131,"output_tokens":651,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124033':3A,99C,114C,179C,326C '-174':130C '-2026':2A,98C,113C,178C,325C '00':143C '0xmrma':340C '11/09/2026':141C '13':142C '2026':129C '3.0.0':271C '3.16.0':53B,201C,273C,285C '644r':20A,25A,331C 'abdela':339C 'access':69B,214C,318C 'acknowledg':332C 'address':279C 'allow':54B 'amazon':219C,310C 'attack':66B 'attent':138C 'authent':209C 'aw':13A,26B,28B,49B,109C,124C,131C,133C,147C,162C,174C,196C,282C 'aws-parallelclust':27B,161C,281C 'aws-security@amazon.com':354C 'bucket':74B,221C,312C 'bulletin':127C 'cli':15A,51B,111C,126C,149C,198C 'cluster':39B,172C,186C 'code':299C 'collabor':342C 'command':11A,46B,96B,107C,122C,154C,193C,242C,268C 'concern':360C 'contain':202C 'content':85B,134C,250C 'control':87B,251C 'coordin':348C 'could':222C 'craft':61B,225C 'creat':168C,259C 'custom':165C 'cve':1A,97C,112C,177C,324C 'date':140C 'deriv':298C 'descript':146C 'directori':81B,236C 'disclosur':33B,350C 'distribut':157C 'email':353C 'ensur':294C,308C 'export':10A,38B,43B,73B,106C,121C,185C,190C,218C,235C,316C 'export-cluster-log':37B,184C 'export-image-log':42B,189C 'file':77B,231C,245C 'fix':306C 'fork':296C 'ghsa':17A,22A,328C 'ghsa-h79v-mp93-644r':16A,21A,327C 'h79v':18A,23A,329C 'hpc':30B,171C 'id':128C 'identifi':176C 'imag':44B,191C 'impact':269C 'import':136C 'incorpor':303C 'intend':80B,234C 'issu':181C,207C,276C,345C 'key':64B,228C 'lab':32B 'lab-disclosur':31B 'latest':291C 'like':335C 'line':155C 'log':9A,40B,45B,72B,105C,120C,187C,192C,217C,315C 'machin':239C 'manag':170C 'moham':338C 'mp93':19A,24A,330C 'name':83B,248C 'new':305C 'object':63B,227C 'open':152C 'outsid':78B,232C 'packag':34B 'parallelclust':14A,29B,50B,110C,125C,148C,163C,197C,283C 'parti':255C 'patch':301C 'path':5A,57B,101C,116C,205C 'pleas':352C 'pm':144C 'privileg':90B,262C 'process':351C 'pst':145C 'public':139C 'pypi':159C 'python':35B 'question':358C 'recommend':287C 'refer':323C 'relat':4A,56B,100C,115C,204C 'remot':210C 'requir':137C 'resolut':274C 'run':94B,240C,266C 's3':62B,220C,226C,311C 'scope':132C 'secur':357C 'sourc':153C 'thank':337C 'third':254C 'tool':156C 'travers':6A,58B,102C,117C,206C 'trust':321C 'type':135C 'upgrad':288C 'use':88B,166C,223C,313C 'user':93B,211C,265C,322C 'version':200C,270C,284C,292C 'via':59B 'vulner':349C 'workaround':307C 'would':246C,257C,334C 'write':68B,76B,213C,230C 'written':244C","nicknames":[],"mitigations":[],"who_affected":"Teams that run the AWS ParallelCluster CLI (aws-parallelcluster on PyPI) below 3.16.0 and use the export-cluster-logs or export-image-logs commands. Exposure depends on who can write to the log export S3 bucket; if only trusted users can, the risk is reduced, as the vendor's workaround states.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aws","awsparallelcluster","hpc","labdisclosure","medium","package","python"],"campaign_type":null,"search_a":"'-124033':3A '-2026':2A '644r':20A,25A 'aw':13A 'cli':15A 'command':11A 'cve':1A 'export':10A 'ghsa':17A,22A 'ghsa-h79v-mp93-644r':16A,21A 'h79v':18A,23A 'log':9A 'mp93':19A,24A 'parallelclust':14A 'path':5A 'relat':4A 'travers':6A","search_b":"'3.16.0':53B 'access':69B 'allow':54B 'attack':66B 'aw':26B,28B,49B 'aws-parallelclust':27B 'bucket':74B 'cli':51B 'cluster':39B 'command':46B,96B 'content':85B 'control':87B 'craft':61B 'directori':81B 'disclosur':33B 'export':38B,43B,73B 'export-cluster-log':37B 'export-image-log':42B 'file':77B 'hpc':30B 'imag':44B 'intend':80B 'key':64B 'lab':32B 'lab-disclosur':31B 'log':40B,45B,72B 'name':83B 'object':63B 'outsid':78B 'packag':34B 'parallelclust':29B,50B 'path':57B 'privileg':90B 'python':35B 'relat':56B 'run':94B 's3':62B 'travers':58B 'use':88B 'user':93B 'via':59B 'write':68B,76B","search_c":"'-124033':99C,114C,179C,326C '-174':130C '-2026':98C,113C,178C,325C '00':143C '0xmrma':340C '11/09/2026':141C '13':142C '2026':129C '3.0.0':271C '3.16.0':201C,273C,285C '644r':331C 'abdela':339C 'access':214C,318C 'acknowledg':332C 'address':279C 'amazon':219C,310C 'attent':138C 'authent':209C 'aw':109C,124C,131C,133C,147C,162C,174C,196C,282C 'aws-parallelclust':161C,281C 'aws-security@amazon.com':354C 'bucket':221C,312C 'bulletin':127C 'cli':111C,126C,149C,198C 'cluster':172C,186C 'code':299C 'collabor':342C 'command':107C,122C,154C,193C,242C,268C 'concern':360C 'contain':202C 'content':134C,250C 'control':251C 'coordin':348C 'could':222C 'craft':225C 'creat':168C,259C 'custom':165C 'cve':97C,112C,177C,324C 'date':140C 'deriv':298C 'descript':146C 'directori':236C 'disclosur':350C 'distribut':157C 'email':353C 'ensur':294C,308C 'export':106C,121C,185C,190C,218C,235C,316C 'export-cluster-log':184C 'export-image-log':189C 'file':231C,245C 'fix':306C 'fork':296C 'ghsa':328C 'ghsa-h79v-mp93-644r':327C 'h79v':329C 'hpc':171C 'id':128C 'identifi':176C 'imag':191C 'impact':269C 'import':136C 'incorpor':303C 'intend':234C 'issu':181C,207C,276C,345C 'key':228C 'latest':291C 'like':335C 'line':155C 'log':105C,120C,187C,192C,217C,315C 'machin':239C 'manag':170C 'moham':338C 'mp93':330C 'name':248C 'new':305C 'object':227C 'open':152C 'outsid':232C 'parallelclust':110C,125C,148C,163C,197C,283C 'parti':255C 'patch':301C 'path':101C,116C,205C 'pleas':352C 'pm':144C 'privileg':262C 'process':351C 'pst':145C 'public':139C 'pypi':159C 'question':358C 'recommend':287C 'refer':323C 'relat':100C,115C,204C 'remot':210C 'requir':137C 'resolut':274C 'run':240C,266C 's3':220C,226C,311C 'scope':132C 'secur':357C 'sourc':153C 'thank':337C 'third':254C 'tool':156C 'travers':102C,117C,206C 'trust':321C 'type':135C 'upgrad':288C 'use':166C,223C,313C 'user':211C,265C,322C 'version':200C,270C,284C,292C 'vulner':349C 'workaround':307C 'would':246C,257C,334C 'write':213C,230C 'written':244C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T21:12:17+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"lab","external_id":"https://aws.amazon.com/security/security-bulletins/rss/2026-174-aws/#GHSA-h79v-mp93-644r","url":"https://aws.amazon.com/security/security-bulletins/rss/2026-174-aws/","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-09T23:46:36+00:00","fetched_at":"2026-11-09T23:46:36+00:00","note":"AWS: CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI"}],"documents":[{"id":110030,"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-174-aws/","title":"AWS: CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI","kind":"vendor","source":"vendor","publisher":"research","text":"CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI\n\n### CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI\n\nBulletin ID: 2026-174-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/09/2026 13:00 PM PST\n\n Description:\n\nAWS ParallelCluster CLI is an open source command line tool, distributed on PyPI as aws-parallelcluster, that customers use to create and manage HPC clusters on AWS.\n\nWe identified CVE-2026-124033, an issue where the export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a relative path traversal issue. An authenticated remote user with write access to the log export Amazon S3 bucket could use a crafted S3 object key to write files outside the intended export directory on the machine running the command. The written files would have names and content controlled by a third party, and would be created with the privileges of the user running the command.\n\nImpacted versions: >= 3.0.0 AND < 3.16.0\n\nResolution:\n\nThis issue has been addressed in aws-parallelcluster version 3.16.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes\n\nWorkarounds:\n\nEnsure the Amazon S3 bucket used for log export is accessible by only trusted users.\n\nReferences:\n\n- CVE-2026-124033\n- GHSA-h79v-mp93-644r\n\nAcknowledgement:\n\nWe would like to thank Mohamed Abdelaal (0xmrma) for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","published_at":"2026-11-09T21:12:17+00:00","relation":"mentions","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}