CVE-2026-122193

OS command injection in the example SSM document provisioning script in Trusted Remote Execution REX before 2026-07-28 might allow an authenticated remote user who is permitted to invoke the Rex-RO or Rex-RW SSM document to execute arbitrary commands as root on the managed instance, bypassing Ced...