CVE-2026-119116

HIGH 7.8CVE-2026-119116 · Published 30/10/2026 · updated 30/10/2026

In short

CVE-2026-119116 is a HIGH (CVSS 7.8) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.16%, higher than 5.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an application that runs on the parent EC2 instance to corrupt heap memory inside a Nitro Enclave which may lead to arbitrary code execution within the enclave. To remediate this issue, users should rebuild any enclave image that includes kmstool-enclave, or code derived from it, against aws-nitro-enclaves-sdk-c 0.4.6.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free