CVE-2026-119116 | AWS kmstool-enclave up to 0.4.5 SetClient Command SetClient command handler use after free

October 30, 2026 Yanac

A vulnerability identified as very critical has been detected in AWS kmstool-enclave up to 0.4.5. Affected by this issue is the function SetClient command handler of the component SetClient Command Handler. The manipulation leads to use after free.

This vulnerability is documented as CVE-2026-119116. The attack needs to be performed locally. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More