{"data":{"id":"2da8d0b1-1c4a-44b9-83e7-b3a234fb721d","title":"CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS","summary":"CVE-2026-7191 affects QnABot on AWS, version 7.2.4 and earlier. The improper use of the static-eval npm package lets an authenticated administrator inject a crafted conditional chaining expression through the Content Designer interface, bypassing the expression sandbox via JavaScript prototype manipulation. Successful exploitation can execute arbitrary code in the fulfillment Lambda execution context and reach Lambda environment variables, OpenSearch indices, S3 objects, and DynamoDB tables.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-020-aws/","publishedAt":"2026-04-27T20:21:23.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["jailbreak","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["QnABot on AWS","Amazon Lex","Amazon OpenSearch Service","Amazon Bedrock"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-04-27T20:21:23.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":["AML.T0054"],"fixes":[]}}