AWS patches SDK flaw that turned a region into credential theft
A cloud and silicon day: Amazon quietly closed a class of bug that let a region field leak live credentials, and China's homegrown AI-chip push got a fresh public-market test with Enflame's STAR Market launch.
AWS quietly patched a flaw across seven of its software development kits after security firm Pi Inc. traced one bug report to roughly 2,500 copies of the same defect. The weakness sits in how the SDKs assemble an endpoint: the region value drops into the middle of a hostname like https://{service}.{region}.amazonaws.com, and on most code paths nothing checked what that field contained. Pi's researchers set the region to a malicious value and showed an ordinary API call could be redirected to an attacker-controlled server — and for the credential-bearing AssumeRoleWithWebIdentity flow used by Elastic Kubernetes Service, Cognito and OpenID Connect, a leaked service-account or bearer token effectively hands over live credentials inside the customer's account.
AWS generates SDK clients for more than 400 services from shared models, so a missing check in the generator replicated the defect everywhere at once. Only the .NET SDK drew a CVE (CVE-2026-22611), and it was rated low at 3.7 on the CVSS scale; AWS framed the change as a "defense-in-depth enhancement," arguing that validating input is the developer's job under the shared responsibility model. Pi disputes that framing — it tested the flaw where it actually runs inside seven third-party platforms that embed an AWS SDK and expose the region field, and said all seven leaked live credentials to a callback server. It's a familiar tension: a systemic bug copied into thousands of clients gets scored as a single low-severity finding, and the same few lines of validation ended up written seven times rather than fixed once at the source.
Chinese cloud-AI-chip maker Enflame (燧原科技) formally kicked off its STAR Market IPO, filing its prospectus, pricing plan and inquiry details late Sunday and seeking to raise 6 billion yuan (about $840 million) to fund its fifth- and sixth-generation AI chip programs. Founded in 2018, the Shanghai company has self-developed four architecture generations and five cloud AI accelerators, and its revenue grew from 301 million yuan in 2023 to 990 million yuan last year; it reported 1.12 billion yuan in the first half of 2026 and guided to 2.3–3 billion yuan for the first nine months, a jump of roughly four to five times, with profitability targeted in 2026 or 2027.
The listing is a notable test for China's domestic AI-accelerator push: Enflame has plowed 3.7 billion yuan into R&D — about 183% of cumulative revenue — betting its full-stack software and thousand-accelerator clusters can convert technical progress into commercial scale. Its debut will say a lot about whether investors are willing to fund the mainland's chip buildout beyond frontier names like Cambricon, at a moment when the broad semiconductor sector is rallying hard.
What to watch: whether Enflame prices above its indicative range, a signal of demand for homegrown cloud AI silicon.
Do you think a bug that's copied into thousands of clients should be scored as a single low-severity CVE, or as the systemic problem it actually is? Tell us in the comments.
