Vulnerability Description
Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended temporary elevated access to the AWS accounts accessed using the TEAM deployment. This issue has been addressed in TEAM version 1.5.1 or later. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://aws.amazon.com/security/security-bulletins/2026-112-aws/
- https://github.com/aws-samples/iam-identity-center-team/releases/tag/v1.5.1
- https://github.com/aws-samples/iam-identity-center-team/security/advisories/GHSA
FAQ
What is CVE-2026-86830?
CVE-2026-86830 is a vulnerability with a CVSS score of 7.2 (HIGH). Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level ...
How severe is CVE-2026-86830?
CVE-2026-86830 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-86830?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.