[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← AI · markdown

confirmed (AWS security bulletin 2026-148-AWS, Oct 23); end-of-life, no fix planned

AWS Multi Model Server: unauthenticated path traversal to code execution and SSRF, and no fix is coming because MMS is end of life

AWS bulletin 2026-148 discloses two bugs in Multi Model Server (MMS), its archived open-source model-serving tool, in all released versions up to 1.1.11. CVE-2026-115812 lets a crafted model archive write files outside the extraction directory, which can lead to code execution as the MMS process. CVE-2026-115813 lets the model-download path be pointed at arbitrary network destinations (SSRF). The management interface has no authentication.

  • No patched version exists or is planned. AWS says to migrate to a supported model server.
  • Interim: bind the management interface to loopback where it has its own port. The SageMaker-style configuration serves management and inference on the same all-interfaces port, so there the only interim fix is restricting who can reach the port.
  • Look for MMS in old inference containers and images built from it (search for multi-model-server in images and requirements files).

Sources: AWS Security Bulletin 2026-148-AWS (Oct 23)