AWS Security ChangesHomeSearch

AWS inspector: Note Inspector SBOM Generator false-positive finding for CVE-2026-116591

Service: inspector · 2026-11-07 · Security-related medium

File: inspector/latest/user/doc-history.md · CVE: CVE-2026-116591

Summary

Adds a doc-history entry stating that the Amazon Inspector SBOM Generator may generate a vulnerability finding for CVE-2026-116591, to be resolved in the next release.

Security assessment

The entry explicitly references CVE-2026-116591 and discloses a known defect in the Inspector SBOM Generator that produces an erroneous vulnerability finding, which affects vulnerability-reporting accuracy; it is a known-issue disclosure, not a fix.

Evidence

+[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)|  Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate a vulnerability finding for CVE-2026-116591. This finding will be resolved in the next release. | November 6, 2026  

Diff

diff --git a/inspector/latest/user/doc-history.md b/inspector/latest/user/doc-history.md
index 5b4e5ca..3822995 100644
--- a//inspector/latest/user/doc-history.md
+++ b//inspector/latest/user/doc-history.md
@@ -16,0 +17 @@ Change| Description| Date
+[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)|  Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate a vulnerability finding for CVE-2026-116591. This finding will be resolved in the next release. | November 6, 2026