AWS Labs Patches Critical Authentication Bypass in Loom AI Agent Platform
AWS Labs fixed a critical CVSS 10.0 vulnerability in Loom that allowed unauthenticated users to gain super-admin access to AI agent control planes. The update also patches SSRF and credential disclosure flaws.
**If you use AWS Loom to manage AI agents, update to version 1.7.0 ASAP, because a public exploit lets anyone on the network take full control of it and your AWS environment. After updating, assume you may have been breached: rotate all OAuth2 secrets, access tokens and IAM credentials, and review CloudTrail logs for suspicious activity.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/aws-labs-patches-critical-authentication-bypass-in-loom-ai-agent-platform-1-3-g-i-5/gD2P6Ple2L
BeyondMachines :verified:
npub1k0…ufvzu
2026-10-07 08:01:49 UTC
Author Public Key
npub1k0e4qe43k60xwvqduvnhntmw8p3aa8sfrg46pw4ja4jc8gqt3vgqmufvzuPublished at
2026-10-07 08:01:49 UTCEvent JSON
{
"id": "f318074ddf9efdae2657d7a966e7f223eeca04606e235808d5275a2ec0f5c83b",
"pubkey": "b3f35066b1b69e67300de32779af6e3863de9e091a2ba0bab2ed6583a00b8b10",
"created_at": 1791360109,
"kind": 1,
"tags": [
[
"t",
"advisory"
],
[
"t",
"cybersecurity"
],
[
"t",
"vulnerability"
],
[
"proxy",
"https://infosec.exchange/@beyondmachines1/117398576140211039",
"web"
],
[
"t",
"infosec"
],
[
"proxy",
"https://infosec.exchange/users/beyondmachines1/statuses/117398576140211039",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/beyondmachines1/statuses/117398576140211039",
"pink.momostr"
],
[
"-"
]
],
"content": "AWS Labs Patches Critical Authentication Bypass in Loom AI Agent Platform\n\nAWS Labs fixed a critical CVSS 10.0 vulnerability in Loom that allowed unauthenticated users to gain super-admin access to AI agent control planes. The update also patches SSRF and credential disclosure flaws.\n\n**If you use AWS Loom to manage AI agents, update to version 1.7.0 ASAP, because a public exploit lets anyone on the network take full control of it and your AWS environment. After updating, assume you may have been breached: rotate all OAuth2 secrets, access tokens and IAM credentials, and review CloudTrail logs for suspicious activity.**\n#cybersecurity #infosec #advisory #vulnerability\nhttps://beyondmachines.net/event_details/aws-labs-patches-critical-authentication-bypass-in-loom-ai-agent-platform-1-3-g-i-5/gD2P6Ple2L",
"sig": "c9c93bccde85121aacd16b967c79784b484b15a785015ee313eff5da1a9bfff04d09884bcfdd66388f7c1f889f5f46aa1258783b88d69e8aa24b21237e6f0edd"
}