AWS Loom
2 CVEs affecting AWS Loom. Latest disclosed: 2026-10-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-103958 | High | 7.6 | 2026-10-02 | Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to ob… |
CVE-2026-103957 | Medium | 6.2 | 2026-10-02 | Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token o… |