CVE-2026-122193

An OS command injection vulnerability exists in the example SSM document provisioning script within Trusted Remote Execution (REX) prior to 2026-07-28. An authenticated remote user authorized to invoke the Rex-RO or Rex-RW SSM documents may execute arbitrary commands as root on the managed instan...