GCVE-110-CLOUD-2025-0119

Advisory Published

Vulnetix · Advisory published April 9, 2025

A path traversal vulnerability in AWS SSM Agent's ValidatePluginId function allows attackers to create directories and execute scripts in unintended locations on the filesystem. This could lead to privilege escalation or other malicious activities, as files may be written to or executed from sensitive areas of the system with root privileges.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
AWS	SSM	—	—

References

Path Traversal in AWS SSM Agent Plugin ID Validation

advisory

Browse GCVE Records

67,407 records in the GCVE database · Updated August 11, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON