---
title: AWS Multi Model Server: unauthenticated path traversal to code execution and SSRF, and no fix is coming because MMS is end of life | ctxsec
url: https://ctxsec.com/items/aws-multi-model-server-eol-cve-2026-115812-no-fix
description: ""
status: "confirmed (AWS security bulletin 2026-148-AWS, Oct 23); end-of-life, no fix planned"
published: 2026-10-23
---

> 

[← AI](/ai) · [markdown](/items/aws-multi-model-server-eol-cve-2026-115812-no-fix.md)

confirmed (AWS security bulletin 2026-148-AWS, Oct 23); end-of-life, no fix planned

2026-10-23

### AWS Multi Model Server: unauthenticated path traversal to code execution and SSRF, and no fix is coming because MMS is end of life

AWS bulletin 2026-148 discloses two bugs in **Multi Model Server** (MMS), its archived open-source model-serving tool, in all released versions up to 1.1.11. **CVE-2026-115812** lets a crafted model archive write files outside the extraction directory, which can lead to code execution as the MMS process. **CVE-2026-115813** lets the model-download path be pointed at arbitrary network destinations (SSRF). The management interface has no authentication.

- No patched version exists or is planned. AWS says to migrate to a supported model server.
- Interim: bind the management interface to loopback where it has its own port. The SageMaker-style configuration serves management and inference on the same all-interfaces port, so there the only interim fix is restricting who can reach the port.
- Look for MMS in old inference containers and images built from it (search for `multi-model-server` in images and requirements files).

Sources: [AWS Security Bulletin 2026-148-AWS (Oct 23)](https://aws.amazon.com/security/security-bulletins/2026-148-aws/)