A vulnerability labeled as problematic has been found in AWS AWS Research and Engineering Studio up to 2026.03. Affected by this issue is the function GetUserPrivateKey of the component Authentication. Such manipulation leads to link following.

This vulnerability is uniquely identified as CVE-2026-14904. The attack can be launched remotely. No exploit exists.