What is CVE-2026-15957?

CVE-2026-15957 is a high-severity vulnerability in Aws Aws-sdk-rust, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2026-07-21.

How severe is CVE-2026-15957?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Aws Aws-sdk-rust

CVE-2026-15957

Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. Uncontrolled recursion in the JSON, C…

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Aws Aws-sdk-rust — versions 0

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

ff89ba41-3aa1-4d27-914a-91399e9639e5 (release-notes, patch)
ff89ba41-3aa1-4d27-914a-91399e9639e5 (vendor-advisory)
ff89ba41-3aa1-4d27-914a-91399e9639e5 (release-notes)

Frequently asked questions

What is CVE-2026-15957?: CVE-2026-15957 is a high-severity vulnerability in Aws Aws-sdk-rust, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2026-07-21.
How severe is CVE-2026-15957?: High severity. CVSS v3 base score is 7.5 out of 10.