To remediate this issue, users should rebuild any enclave image that includes kmstool-enclave, or code derived from it, against aws-nitro-enclaves-sdk-c 0.4.6.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| AWS | kmstool-enclave | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Fri, 30 Oct 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an application that runs on the parent EC2 instance to corrupt heap memory inside a Nitro Enclave which may lead to arbitrary code execution within the enclave. To remediate this issue, users should rebuild any enclave image that includes kmstool-enclave, or code derived from it, against aws-nitro-enclaves-sdk-c 0.4.6. | |
| Title | Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c | |
| First Time appeared |
Aws
Aws kmstool-enclave |
|
| Weaknesses | CWE-415 CWE-416 |
|
| CPEs | cpe:2.3:a:aws:kmstool-enclave:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Aws
Aws kmstool-enclave |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: AMZN
Published:
Updated: 2026-10-30T16:21:02.630Z
Reserved: 2026-10-29T14:19:52.182Z
Link: CVE-2026-119116
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-10-30T17:17:16.343
Modified: 2026-10-30T19:23:54.487
Link: CVE-2026-119116
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-30T17:30:13Z