Amazon EMR vulnerabilities (CVE)

CVE records published for Amazon EMR, newest first. Follow to get an email when a new one appears.

1 results

8.5High

CVE-2025-8904 1 year ago

Privilege escalation issue in Amazon EMR Secret Agent component

Amazon EMR

Amazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users a…