GCVE-110-CLOUD-2025-0003

Advisory Published

Vulnetix · Advisory published August 14, 2025

A vulnerability in the Amazon ECS agent could allow an introspection server to be accessed off-host. This information disclosure issue, if exploited, could allow another instance in the same security group to access the server's data. The vulnerability does not affect instances where off-host access is set to 'false'. The issue has been patched in version 1.97.1 of the ECS agent.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
AWS	ECS	—	—
AWS	Cloud Services	—	—

Aliases

CVE-2025-9039

References

AWS ECS Agent Information Disclosure Vulnerability

advisory

Browse GCVE Records

73,044 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON