CVE-2026-6967 | AWS tough/tuftool up to 0.21.x load_delegations data authenticity

A vulnerability was found in AWS tough and tuftool up to 0.21.x. It has been classified as problematic. Affected is the function load_delegations. The manipulation leads to insufficient verification of data authenticity.

This vulnerability is uniquely identified as CVE-2026-6967. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.