AWS patches relative path traversal flaw in ParallelCluster CLI
What happened.Amazon Web Services published security bulletin 2026-174-AWS resolving a relative path traversal vulnerability in the AWS ParallelCluster command-line interface.
Why it matters.AWS ParallelCluster deploys high-performance computing clusters for scientific simulation and engineering research. When log extraction commands permit arbitrary file writes, compromised S3 buckets allow attackers to overwrite local scripts and binaries on administrator workstations. DevOps engineers running ParallelCluster should update the CLI package to version 3.16.0 immediately. Cloud teams should audit write permissions on cluster log export buckets.