What is CVE-2025-9039?

CVE-2025-9039 is a medium-severity vulnerability in Amazon Ecs, classified under Insecure Inherited Permissions. CVSS score: 4.3/10. Published 2025-08-14.

How severe is CVE-2025-9039?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Amazon Ecs

CVE-2025-9039

We identified an issue in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the same security group or if their security groups allow incomi…

EPSS: 0.002 (13.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Amazon Ecs — versions 0.0.3

Weakness classification (CWE)

CWE-277 — Insecure Inherited Permissions

References

ff89ba41-3aa1-4d27-914a-91399e9639e5 (patch)
ff89ba41-3aa1-4d27-914a-91399e9639e5 (vendor-advisory)
ff89ba41-3aa1-4d27-914a-91399e9639e5 (vendor-advisory)

Frequently asked questions

What is CVE-2025-9039?: CVE-2025-9039 is a medium-severity vulnerability in Amazon Ecs, classified under Insecure Inherited Permissions. CVSS score: 4.3/10. Published 2025-08-14.
How severe is CVE-2025-9039?: Medium severity. CVSS v3 base score is 4.3 out of 10.