{"id":51831,"date":"2026-08-29T09:00:00","date_gmt":"2026-08-29T07:00:00","guid":{"rendered":"https:\/\/www.cloudmagazin.com\/?p=51831"},"modified":"2026-10-16T08:42:32","modified_gmt":"2026-10-16T06:42:32","slug":"aws-ssm-agent-allows-attackers-to-silently-gain-root-access","status":"publish","type":"post","link":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/","title":{"rendered":"AWS SSM Agent lets attackers quietly become root"},"content":{"rendered":"<p><strong>On nearly every managed instance, the SSM Agent waits for jobs from the cloud. AWS published Bulletin 2026-091 and CVE-2026-81849 on 28 August; the patch has been available since 21 May. Fleet Manager shows which instances already carry the corrected version.<\/strong><\/p>\n<h2>Key takeaways<\/h2>\n<div style=\"background:#f8fbfd;border:1px solid rgba(11,183,253,0.28);border-radius:8px;padding:22px 26px;margin:16px 0 34px;box-shadow:0 1px 0 rgba(11,183,253,0.08),0 2px 8px rgba(0,0,0,0.03);\">\n<ul style=\"margin:0;padding-left:20px;line-height:1.75;color:#1a2733;\">\n<li style=\"margin-bottom:10px;\"><strong>If the agent version in Fleet Manager is below 3.3.4515.0, the fix is missing.<\/strong> Check the version column first.<\/li>\n<li style=\"margin-bottom:10px;\"><strong>The download plugin can place files as root outside the download folder.<\/strong><\/li>\n<li style=\"margin-bottom:0;\"><strong>AWS names no workaround.<\/strong> Anyone who does not update the agent leaves the write path open.<\/li>\n<\/ul>\n<\/div>\n<p style=\"font-size:0.88em;color:#666;margin:20px 0 32px 0;border-top:1px solid #e5e5e5;border-bottom:1px solid #e5e5e5;padding:10px 0;\"><span style=\"font-family:'SF Mono','Monaco','Consolas',monospace;color:#0879aa;font-weight:700;text-transform:uppercase;font-size:0.72em;letter-spacing:0.14em;margin-right:14px;\">Related:<\/span>AWS Identity Center: multi-region is now part of the setup&nbsp;&nbsp;<span style=\"color:#ccc;\">\/<\/span>&nbsp;&nbsp;AWS Cognito: Skill resets the client<\/p>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">The patch has been in the agent since May<\/h2>\n<p>AWS shipped the patch on 21 May in version 3.3.4515.0. Bulletin 2026-091 and CVE-2026-81849 followed on 28 August. Anyone who did not update the agent during that period is still running the old version. The researcher wareeqshile reported the flaw through coordinated disclosure.<\/p>\n<p>Agent versions from 2.0.767.0 to 3.3.4364.0 are affected. The affected version range extends far back, so older installations are also affected. From 3.3.4515.0 onward, the write path is closed. Amazon assigns the flaw a score of 8.7 under CVSS 4.0. AWS names no workaround. Anyone who waited for the 28 August bulletin alone missed the May fix for three months.<\/p>\n<p>On 2 June, version 3.3.4624.0 tightened the internal path check once again. Anyone on 3.3.4515.0 or newer already has the fix for the flaw.<\/p>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">The download plugin writes as root<\/h2>\n<p>AWS-DownloadContent triggers the file retrieval from S3. The plugin fetches the object and writes the file as root. If the object name contains path components, the file lands outside the intended download folder. If sensitive system files are overwritten in the process, this can result in code execution as root. The agent runs with these rights on the instance; that is exactly why this one write path is enough.<\/p>\n<p>The impact is limited to the machine where the agent runs. The bulletin names EC2 instances, edge devices, on-premises servers and virtual machines. The bulletin does not list accounts, services and customer data in AWS itself as affected.<\/p>\n<p>The prerequisite is the permission to trigger AWS-DownloadContent via Run Command. Restricting access to this exact document still leaves the write path open; unauthenticated access from the network is not enough.<\/p>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">The version is shown in Fleet Manager<\/h2>\n<p>The quickest way to check the agent version is through Fleet Manager. It has a column for the SSM Agent version. If the value is below 3.3.4515.0, the fix is missing. That applies to EC2 just as it does to machines outside AWS that Systems Manager connects to: on-premises servers, virtual machines and edge devices. Anyone who checks the column sees the version per node. The Fleet Manager column documents the current agent version for every EC2 and hybrid node with the agent installed, before anyone updates the agent.<\/p>\n<p>AWS can update the agent on its own across an entire account. The Auto-Update option in Fleet Manager checks every two weeks and rolls out new versions via the AWS-UpdateSSMAgent document. Only this column shows whether a fleet already carries the fix. An estimate based on the image date is no substitute for looking at the column.<\/p>\n<p>Anyone who has not enabled Auto-Update stays on the version the instance launched with until someone updates the agent. The biweekly run only helps if the option is actually active.<\/p>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">AMIs and golden images keep the old version<\/h2>\n<p>Amazon Linux and Windows AMIs often ship with the agent already included. The bundled version is often not the newest. Anyone launching an image from the catalog therefore does not automatically get the patched agent.<\/p>\n<p>Instances launched from golden images created in the spring run the same old agent whenever a launch template continues to use those images. The image itself stays old until someone replaces it. A rebuild of the image updates the agent on new instances; instances already running stay on their version until the agent is updated there. Launch templates that hold a fixed image ID do not change this as long as the ID stays the same.<\/p>\n<h2 style=\"padding-top:64px;margin-bottom:20px;\">Frequently asked questions<\/h2>\n<details>\n<summary><strong>What is the SSM Agent?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\"><strong>What is the SSM Agent?<\/strong> The AWS Systems Manager Agent is the software on a managed instance that receives jobs from Systems Manager. These include Run Command, Patch Manager and Session Manager. Each job arrives as a document; the agent starts the matching plugin on the machine.<\/p>\n<\/details>\n<details>\n<summary><strong>Is removing AWS-DownloadContent from the IAM list enough?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">With that in place, the plugin can no longer be invoked by authorized callers. It does not replace the update. The flaw remains until the agent has been updated.<\/p>\n<\/details>\n<details>\n<summary><strong>Do I have to rebuild golden images?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">Yes, if the image itself ships with the agent version. <\/p>\n<\/details>\n<details>\n<summary><strong>What does version 3.3.4624.0 change compared with 3.3.4515.0?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">On 2 June, 3.3.4624.0 tightened the internal path check. The fix for the flaw itself starts at 3.3.4515.0.<\/p>\n<\/details>\n<details>\n<summary><strong>Is AWS itself affected?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">AWS limits the impact to the machine where the agent runs. The bulletin does not list accounts, services and customer data in AWS itself as affected.<\/p>\n<\/details>\n<h2>Editor&#8217;s Picks<\/h2>\n<ul style=\"list-style:none;margin:0 0 8px;padding:0;\">\n<li style=\"padding:10px 0;border-bottom:1px solid #eee;\">AWS AgentCore Brings Memory to GovCloud<\/li>\n<li style=\"padding:10px 0;border-bottom:1px solid #eee;\">Timestream Backup: Restore Without a Ticket<\/li>\n<li style=\"padding:10px 0;\"><a href=\"https:\/\/www.cloudmagazin.com\/en\/2026\/07\/25\/lambda-managed-instances-the-logs-you-need\/\" style=\"color:#1a1a1a;text-decoration:none;\">Lambda Managed Instances: The Logs You Need<\/a><\/li>\n<\/ul>\n<p style=\"margin:44px 0 12px;font-size:0.72em;font-weight:700;text-transform:uppercase;letter-spacing:0.18em;color:#666;\">More from the MBF Media Network<\/p>\n<div style=\"padding:14px 18px;border-left:3px solid #202528;background:#fafafa;margin-bottom:6px;\">\n<div style=\"font-size:0.7em;font-weight:700;color:#202528;text-transform:uppercase;letter-spacing:0.12em;margin-bottom:4px;\">mybusinessfuture<\/div>\n<p><a href=\"https:\/\/mybusinessfuture.com\/mckinsey-ki-hebt-tempo-die-guv-bleibt-flach\/\" style=\"font-weight:600;line-height:1.4;color:#1a1a1a;text-decoration:none;\">McKinsey: AI Speeds Up, EBIT Remains Flat<\/a><\/p>\n<\/div>\n<div style=\"padding:14px 18px;border-left:3px solid #d65663;background:#fafafa;margin-bottom:6px;\">\n<div style=\"font-size:0.7em;font-weight:700;color:#d65663;text-transform:uppercase;letter-spacing:0.12em;margin-bottom:4px;\">digital-chiefs<\/div>\n<p><a href=\"https:\/\/www.digital-chiefs.de\/guenstigere-token-teurere-agenten-das-inference-paradox-erreicht-die-budgetplanu\/\" style=\"font-weight:600;line-height:1.4;color:#1a1a1a;text-decoration:none;\">OpenAI Lowers Token Prices, Agents Eat into Savings<\/a><\/p>\n<\/div>\n<div style=\"padding:14px 18px;border-left:3px solid #69d8ed;background:#fafafa;\">\n<div style=\"font-size:0.7em;font-weight:700;color:#69d8ed;text-transform:uppercase;letter-spacing:0.12em;margin-bottom:4px;\">securitytoday<\/div>\n<p><a href=\"https:\/\/www.securitytoday.de\/2026\/08\/27\/cisa-ein-soc-sieht-nichts-der-andere-isoliert\/\" style=\"font-weight:600;line-height:1.4;color:#1a1a1a;text-decoration:none;\">Red Team vs. KRITIS: Even Good SOCs Lose<\/a><\/p>\n<\/div>\n<p>Source: AWS Security Bulletin 2026-091-AWS, August 28, 2026.<\/p>\n<p style=\"text-align:right;color:#868e96;font-size:0.75em;margin-top:40px;\"><em>Image source: AI-generated (August 2026)<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"CVE-2026-81849: The agent writes as root outside the download folder. The fix has been available since May.","protected":false},"author":31,"featured_media":51573,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_meta-robots-adv":"","_yoast_wpseo_canonical":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","_yoast_wpseo_opengraph-image":"","_yoast_wpseo_opengraph-image-id":0,"_yoast_wpseo_twitter-title":"","_yoast_wpseo_twitter-description":"","_yoast_wpseo_twitter-image":"","_yoast_wpseo_twitter-image-id":0,"pre_headline":"","bildquelle":"","teasertext":"","language":"de","_evm_slot_owner":"","_evm_translation_lang":"","featured_post":0,"featured_post_sortierung":0,"_wp_old_slug":[],"footnotes":""},"categories":[929],"tags":[],"industry":[],"class_list":["post-51831","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cm-guides"],"evm_reading_time_minutes":6,"wpml_language":"en","wpml_translation_of":51571,"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AWS SSM Agent lets attackers quietly become root<\/title>\n<meta name=\"description\" content=\"AWS Bulletin 2026-091: The SSM Agent can write as root outside the download folder. The patch has been in place since May. Check Fleet Manager first.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AWS SSM Agent lets attackers quietly become root\" \/>\n<meta property=\"og:description\" content=\"AWS Bulletin 2026-091: The SSM Agent can write as root outside the download folder. The patch has been in place since May. Check Fleet Manager first.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/\" \/>\n<meta property=\"og:site_name\" content=\"cloudmagazin\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cloudmagazincom\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-29T07:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-16T06:42:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/08\/aws-ssm-agent-root-schreiben-download-plugin-cover-hero.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1792\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Alec Chizhik\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cloudmagazin\" \/>\n<meta name=\"twitter:site\" content=\"@cloudmagazin\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alec Chizhik\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/08\\\/29\\\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/08\\\/29\\\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\\\/\"},\"author\":{\"name\":\"Alec Chizhik\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#\\\/schema\\\/person\\\/ce38baaa19a580268aedce096597eb3c\"},\"headline\":\"AWS SSM Agent lets attackers quietly become root\",\"datePublished\":\"2026-08-29T07:00:00+00:00\",\"dateModified\":\"2026-10-16T06:42:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/08\\\/29\\\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\\\/\"},\"wordCount\":912,\"publisher\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/08\\\/29\\\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/aws-ssm-agent-root-schreiben-download-plugin-cover-hero.jpg\",\"articleSection\":[\"Guides\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/08\\\/29\\\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\\\/\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/08\\\/29\\\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\\\/\",\"name\":\"AWS SSM Agent lets attackers quietly become root\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/08\\\/29\\\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/08\\\/29\\\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/aws-ssm-agent-root-schreiben-download-plugin-cover-hero.jpg\",\"datePublished\":\"2026-08-29T07:00:00+00:00\",\"dateModified\":\"2026-10-16T06:42:32+00:00\",\"description\":\"AWS Bulletin 2026-091: The SSM Agent can write as root outside the download folder. The patch has been in place since May. Check Fleet Manager first.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/08\\\/29\\\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/08\\\/29\\\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/08\\\/29\\\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/aws-ssm-agent-root-schreiben-download-plugin-cover-hero.jpg\",\"contentUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/aws-ssm-agent-root-schreiben-download-plugin-cover-hero.jpg\",\"width\":1792,\"height\":1024,\"caption\":\"Bildquelle: KI-generiert (August 2026)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/08\\\/29\\\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/home\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AWS SSM Agent lets attackers quietly become root\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/\",\"name\":\"cloudmagazin\",\"description\":\"Inspiration f\u00fcr Businessentscheider\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#organization\",\"name\":\"cloudmagazin\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/cloudmagazin-logo-klein_menu.jpg\",\"contentUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/cloudmagazin-logo-klein_menu.jpg\",\"width\":150,\"height\":150,\"caption\":\"cloudmagazin\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/cloudmagazincom\\\/\",\"https:\\\/\\\/x.com\\\/cloudmagazin\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/cloudmagazin\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#\\\/schema\\\/person\\\/ce38baaa19a580268aedce096597eb3c\",\"name\":\"Alec Chizhik\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/alec-chizhik.jpg\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/alec-chizhik.jpg\",\"contentUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/alec-chizhik.jpg\",\"caption\":\"Alec Chizhik\"},\"description\":\"Alec is the Chief Digital Officer at Evernine and writes about cloud architectures, IT security, and digital operations practices.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/alecchizhik\\\/\"],\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/author\\\/alec\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AWS SSM Agent lets attackers quietly become root","description":"AWS Bulletin 2026-091: The SSM Agent can write as root outside the download folder. The patch has been in place since May. Check Fleet Manager first.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/","og_locale":"en_US","og_type":"article","og_title":"AWS SSM Agent lets attackers quietly become root","og_description":"AWS Bulletin 2026-091: The SSM Agent can write as root outside the download folder. The patch has been in place since May. Check Fleet Manager first.","og_url":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/","og_site_name":"cloudmagazin","article_publisher":"https:\/\/www.facebook.com\/cloudmagazincom\/","article_published_time":"2026-08-29T07:00:00+00:00","article_modified_time":"2026-10-16T06:42:32+00:00","og_image":[{"width":1792,"height":1024,"url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/08\/aws-ssm-agent-root-schreiben-download-plugin-cover-hero.jpg","type":"image\/jpeg"}],"author":"Alec Chizhik","twitter_card":"summary_large_image","twitter_creator":"@cloudmagazin","twitter_site":"@cloudmagazin","twitter_misc":{"Written by":"Alec Chizhik","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/#article","isPartOf":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/"},"author":{"name":"Alec Chizhik","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/person\/ce38baaa19a580268aedce096597eb3c"},"headline":"AWS SSM Agent lets attackers quietly become root","datePublished":"2026-08-29T07:00:00+00:00","dateModified":"2026-10-16T06:42:32+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/"},"wordCount":912,"publisher":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#organization"},"image":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/08\/aws-ssm-agent-root-schreiben-download-plugin-cover-hero.jpg","articleSection":["Guides"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/","url":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/","name":"AWS SSM Agent lets attackers quietly become root","isPartOf":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/#primaryimage"},"image":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/08\/aws-ssm-agent-root-schreiben-download-plugin-cover-hero.jpg","datePublished":"2026-08-29T07:00:00+00:00","dateModified":"2026-10-16T06:42:32+00:00","description":"AWS Bulletin 2026-091: The SSM Agent can write as root outside the download folder. The patch has been in place since May. Check Fleet Manager first.","breadcrumb":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/#primaryimage","url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/08\/aws-ssm-agent-root-schreiben-download-plugin-cover-hero.jpg","contentUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/08\/aws-ssm-agent-root-schreiben-download-plugin-cover-hero.jpg","width":1792,"height":1024,"caption":"Bildquelle: KI-generiert (August 2026)"},{"@type":"BreadcrumbList","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/08\/29\/aws-ssm-agent-allows-attackers-to-silently-gain-root-access\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cloudmagazin.com\/en\/home\/"},{"@type":"ListItem","position":2,"name":"AWS SSM Agent lets attackers quietly become root"}]},{"@type":"WebSite","@id":"https:\/\/www.cloudmagazin.com\/en\/#website","url":"https:\/\/www.cloudmagazin.com\/en\/","name":"cloudmagazin","description":"Inspiration f\u00fcr Businessentscheider","publisher":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cloudmagazin.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.cloudmagazin.com\/en\/#organization","name":"cloudmagazin","url":"https:\/\/www.cloudmagazin.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2020\/04\/cloudmagazin-logo-klein_menu.jpg","contentUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2020\/04\/cloudmagazin-logo-klein_menu.jpg","width":150,"height":150,"caption":"cloudmagazin"},"image":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/cloudmagazincom\/","https:\/\/x.com\/cloudmagazin","https:\/\/www.linkedin.com\/showcase\/cloudmagazin\/"]},{"@type":"Person","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/person\/ce38baaa19a580268aedce096597eb3c","name":"Alec Chizhik","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/alec-chizhik.jpg","url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/alec-chizhik.jpg","contentUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/alec-chizhik.jpg","caption":"Alec Chizhik"},"description":"Alec is the Chief Digital Officer at Evernine and writes about cloud architectures, IT security, and digital operations practices.","sameAs":["https:\/\/www.linkedin.com\/in\/alecchizhik\/"],"url":"https:\/\/www.cloudmagazin.com\/en\/author\/alec\/"}]}},"_links":{"self":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts\/51831","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/users\/31"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/comments?post=51831"}],"version-history":[{"count":18,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts\/51831\/revisions"}],"predecessor-version":[{"id":54161,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts\/51831\/revisions\/54161"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/media\/51573"}],"wp:attachment":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/media?parent=51831"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/categories?post=51831"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/tags?post=51831"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/industry?post=51831"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}