CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

Published 2026-10-07T18:25:26Z•1f8f37ef6b080e7262c3711044b1dd6f9a1f9b766df39e0c9a2686310bbfc9e8

Source metadata

Publication date
2026-10-07T18:25:26Z
Source identifier
3fe0a88cff07c5c613cb809e24cc4ef2599ea901
Public record ID
record:sha256:1f8f37ef6b080e7262c3711044b1dd6f9a1f9b766df39e0c9a2686310bbfc9e8

This is source-provided metadata, not an enriched summary or an impact assessment. Follow the canonical source link for the published material.

Evidence and limitations

Source ID
aws_security_bulletins
Record identifier
1f8f37ef6b080e7262c3711044b1dd6f9a1f9b766df39e0c9a2686310bbfc9e8
Record type
Source metadata

This record may overlap with other records. Source metadata can be incomplete or change. Validate consequential decisions against the linked source and your own environment.