QN
Product
qnabot-on-aws
by aws · last CVE Oct 6, 2026
2
CVEs
0
On KEV
7.2
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add qnabot-on-aws to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-7191
7.2
0%
Apr 27
Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS
Affected: through 7.2.4
CVE-2026-105811
6.5
0%
Oct 6
Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
Affected: 7.0.0 before 7.4.6
Showing 2