AWS patches high-severity OS command injection flaw in databases-on-aws plugin

Amazon has released a security update for its Agent Plugins for AWS, specifically addressing a high-severity operating system command injection vulnerability in the databases-on-aws plugin. The flaw, tracked as CVE-2026-107322, allows a remote, unauthenticated attacker to execute arbitrary commands on the host machine running the helper service.

The vulnerability exists in all versions of the databases-on-aws plugin prior to 1.7.1. According to the National Vulnerability Database (NVD), the issue arises from an incomplete list of disallowed inputs. An attacker can exploit this weakness by introducing a crafted database command value within the agent context. This action bypasses existing input validation controls, leading to arbitrary operating system command execution on the affected host.

Technical Context and Severity

The NVD has assigned a CVSS score of 8.5 to CVE-2026-107322, classifying the severity as high. The weakness is categorized under CWE-184, which pertains to insufficient data validation. The core technical failure involves the plugin’s inability to properly sanitize or reject malicious input strings that are injected into the database command structure.

Because the attacker does not need authentication to exploit this flaw, the attack surface is significant. The exploitation vector is remote, meaning an adversary can trigger the command injection from outside the local network, provided they can interact with the agent context where the database commands are processed. The successful execution of arbitrary operating system commands grants the attacker the same privileges as the process running the helper, potentially leading to full system compromise.

Who Is Affected

This vulnerability specifically impacts organizations and infrastructure utilizing the Amazon Agent Plugins for AWS, with a direct focus on the databases-on-aws component. Any environment running a version of the databases-on-aws plugin earlier than 1.7.1 is considered vulnerable.

The scope of the impact is limited to systems where this specific plugin is deployed and active. Users who have not yet upgraded to the patched version remain exposed to potential remote exploitation. The advisory does not indicate any other AWS services or plugins are affected by this specific CVE, but the severity of OS command injection warrants immediate attention for all administrators managing these database agents.

What should you do?

To mitigate the risk, AWS advises users to upgrade the databases-on-aws plugin to version 1.7.1 or later immediately. Merely installing the update is not sufficient; administrators must verify that the updated plugin is active in each environment where it is used. Confirming the active status of the patch ensures that the old, vulnerable code is no longer processing database commands.

There are no known workarounds other than upgrading to the patched version. Organizations should audit their AWS environments to identify any instances of the databases-on-aws plugin running versions below 1.7.1 and prioritize the remediation process.