AWS Security ChangesHomeSearch

AWS dcv: Session Manager CLI 2026.0-577 notes: broker cluster node authz fix

Service: dcv · 2026-10-30 · Security-related high

File: dcv/latest/sm-cli/doc-history-release-notes.md · Type: authz

Summary

Added 2026.0-577 release notes (build numbers, Amazon Linux 2027 support) stating that authentication and authorization of nodes joining the Broker cluster was enforced to address a security vulnerability, plus a doc-history table row.

Security assessment

The release note explicitly states a security vulnerability was addressed by enforcing authentication and authorization for nodes joining the broker cluster, i.e. preventing unauthorized cluster members from joining/participating — a concrete authn/authz fix, though no CVE id is given.

Evidence

+  * Enforced authentication and authorization of nodes joining the Broker cluster to address a security vulnerability.

Diff

diff --git a/dcv/latest/sm-cli/doc-history-release-notes.md b/dcv/latest/sm-cli/doc-history-release-notes.md
index aa6f499..04989f5 100644
--- a//dcv/latest/sm-cli/doc-history-release-notes.md
+++ b//dcv/latest/sm-cli/doc-history-release-notes.md
@@ -27,0 +28,2 @@ This section provides an overview of the major updates, feature releases, and bu
+  * 2026.0-577— October 28, 2026
+
@@ -82,0 +85,16 @@ This section provides an overview of the major updates, feature releases, and bu
+### 2026.0-577— October 28, 2026
+
+Build numbers | Changes and bug fixes  
+---|---  
+  
+  * Broker: 577
+  * Agent: 920
+  * CLI: 160
+
+| 
+
+  * Added support for Amazon Linux 2027 for the Agent (64-bit x86 and 64-bit ARM) and the Broker (64-bit x86).
+  * Enforced authentication and authorization of nodes joining the Broker cluster to address a security vulnerability.
+
+  
+  
@@ -515,0 +534 @@ Change | Description | Date
+Amazon DCV Version 2026.0-577 | Amazon DCV Session Manager has been updated for Amazon DCV 2026.0-577. For more information, see 2026.0-577— October 28, 2026. | October 28, 2026