CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS

unknownCVE-2026-7191

Bulletin ID: 2026-020-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 2026/04/27 13:15 PM PDT Description: QnABot on AWS is an open-source solution that provides a multi-channel, multi-language conversational interface powered by Amazon Lex, Amazon OpenSearch Service, and optionally Amazon Bedrock. We identified CVE-2026-7191, where the improper use of the static-eval npm package may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context. By injecting a crafted conditional chaining expression via the Content Designer interface, an actor with Admin access could bypass the intended expression sandbox through JavaScript prototype manipulation. Successful exploitation may grant direct access to backend resources, including Lambda environment variables, OpenSearch indices, S3 objects, and DynamoDB tables, that are not exposed through normal administrative interfaces. Impacted versions: <=7.2.4 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

CSIRTS triage

vendor: AWS product: QnABot Remote code executionOther

What: Improper use of the static-eval npm package may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context.
Who is affected: Authenticated administrators of QnABot on AWS.
Urgency: Remediation is urgent due to the risk of arbitrary code execution and access to backend resources.
Action: Review and secure the use of the static-eval npm package.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch QnABot

Get an email when a new QnABot advisory drops — max one per day, one-click unsubscribe.

Details

Source: AWS Security Bulletins (INTL · vendor-psirt · site)
Severity: unknown
Published: 2026-06-05
Exploitation: Not in CISA KEV at last sync

Original advisory: https://aws.amazon.com/security/security-bulletins/rss/2026-020-aws/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-71910.43% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 35% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-7191	coverage & exploitation status	NVD · CVE.org

Recent advisories for - Arbitrary Code

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

highCVE-2026-6939: The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Si…nvd · 2026-07-11
highCVE-2025-6784: The Code Engine plugin for WordPress is vulnerable to Remote Code Execution in all versions up …nvd · 2026-07-11
highCVE-2026-13353: The WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel plugin for WordP…nvd · 2026-07-11
unknownCVE-2026-55884: Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.20.8 through…nvd · 2026-07-10
unknownCVE-2026-55883: Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.24.0 through…nvd · 2026-07-10
unknownCVE-2026-55882: Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.19.5 through…nvd · 2026-07-10