Incorrect Privilege Assignment in AWS IAM Identity Center Solution

CVE-2026-86830

What is CVE-2026-86830?

The AWS IAM Identity Center solution contains a vulnerability due to incorrect privilege assignments in its Temporary Elevated Access Management (TEAM) feature. An authenticated remote user with application-level access may exploit this weakness to read, approve, modify, or revoke any access requests. This could potentially provide unintended temporary elevated permissions to the associated AWS accounts accessed through the TEAM deployment. To mitigate this risk, users are advised to upgrade to version 1.5.1 or later, ensuring all derivative code is also patched to incorporate security fixes.

References