CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS

Summary

CVE-2026-7191 affects QnABot on AWS, version 7.2.4 and earlier. The improper use of the static-eval npm package lets an authenticated administrator inject a crafted conditional chaining expression through the Content Designer interface, bypassing the expression sandbox via JavaScript prototype manipulation. Successful exploitation can execute arbitrary code in the fulfillment Lambda execution context and reach Lambda environment variables, OpenSearch indices, S3 objects, and DynamoDB tables.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• HighCVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypassSame vendor · AWS Security Bulletins
• MediumCVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP ServerSame vendor · AWS Security Bulletins
• MediumCVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC WorkflowsSame vendor · AWS Security Bulletins
• HighCVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents ToolsSame vendor · AWS Security Bulletins
• HighGHSA-4v6f-7vjh-6x4m: Strands Agents SDK: Exposure of data element to wrong session in the A2A ServerSame vendor · GitHub Advisory Database