# CVE-2026-126087: OpenJD Sessions for Python untrusted search path in process launcher

Source: https://junglewise.ai/threats/cve-2026-126087-untrusted-search-path-in-openjd-sessions-for-python-and-the-aws  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-10. Updated: 2026-11-10  
License: CC BY 4.0 with a link back

CVE-2026-126087 · Severity: high · CVSS 8.8 · Published 2026-11-10

AWS Deadline Cloud worker agent uses OpenJD Sessions for Python to run jobs as unprivileged users on Linux. A flaw in how the library invokes the sudo command allows an authenticated user with job submission permissions to manipulate the PATH environment variable and substitute a malicious sudo binary, gaining code execution as the worker agent OS user and stealing AWS credentials including fleet role and EC2 instance identity credentials.

Technologies: [Amazon AWS](https://junglewise.ai/threats/technologies/aws). Vendors: [Amazon](https://junglewise.ai/threats/vendors/amazon), [AWS](https://junglewise.ai/threats/vendors/aws).

## Quick answers

**Is CVE-2026-126087 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-126087 being exploited in the wild.

**How severe is CVE-2026-126087?** High severity, with a CVSS score of 8.8, published 10 November 2026.

**Which products and versions are affected?** AWS Deadline Cloud worker agent before 0.33.0; OpenJD Sessions for Python before 0.11.0.

**Is there a fix for CVE-2026-126087?** Yes: fixed in OpenJD Sessions for Python 0.11.0, AWS Deadline Cloud worker agent 0.33.0. Until then: Until a customer-managed fleet is upgraded, limit permission to submit jobs (deadline:CreateJob) to trusted principals only. Upgrading is the only complete fix.</anigation>
<parameter name="timeline">[
  {
    "kind": "disclosed",
    "at": "2026-11-10"
  }
] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-126087 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-126087?** Check whether you run Amazon AWS, AWS Deadline Cloud worker agent or OpenJD Sessions for Python at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in OpenJD Sessions for Python 0.11.0, AWS Deadline Cloud worker agent 0.33.0

Until a customer-managed fleet is upgraded, limit permission to submit jobs (deadline:CreateJob) to trusted principals only. Upgrading is the only complete fix.</anigation>
<parameter name="timeline">[
  {
    "kind": "disclosed",
    "at": "2026-11-10"
  }
]

## Technical details

The cross-user process launcher in OpenJD Sessions invokes sudo by bare name in a job-controlled environment, allowing PATH manipulation to point to a attacker-supplied sudo binary. An authenticated remote user with deadline:CreateJob permission can craft a job that modifies PATH and places a malicious sudo executable, achieving arbitrary code execution as the worker agent user. The vulnerability affects Linux only; Windows workers are not affected. It is fixed in OpenJD Sessions 0.11.0 and AWS Deadline Cloud worker agent 0.33.0 by using absolute paths and a fixed list of trusted directories.

## Affected products

- AWS Deadline Cloud worker agent before 0.33.0
- OpenJD Sessions for Python before 0.11.0

## References

- [https://aws.amazon.com/security/security-bulletins/rss/2026-177-aws/](https://aws.amazon.com/security/security-bulletins/rss/2026-177-aws/)

## Related threats

- [An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 (awssql/v2.0.0)](https://junglewise.ai/threats/cve-2026-126793-privilege-escalation-in-aurora-postgresql-dialect-detection-in)
- [AWS SDK for pandas EMR unverified bucket ownership](https://junglewise.ai/threats/cve-2026-127119-unverified-ownership-of-the-default-emr-cluster-log-location-in)
- [Amazon mcp-gateway-registry server-side request forgery in registration API](https://junglewise.ai/threats/cve-2026-125926-server-side-request-forgery-in-the-server-registration-and)
- [Amazon mcp-gateway-registry authorization bypass in management API](https://junglewise.ai/threats/cve-2026-100307-missing-authorization-on-the-external-management-api-in-mcp)
- [AWS Kiro CLI incorrect default permissions on session files](https://junglewise.ai/threats/cve-2026-124848-incorrect-default-permissions-on-session-transcripts-and-prompt)