CVE-2026-86830

Name of the Vulnerable Software and Affected Versions Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center versions prior to 1.5.1

Description An incorrect privilege assignment exists that may allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests. This authorization weakness can be used to manipulate the privileged-access workflow, enabling the user to obtain unintended temporary elevated access to the AWS accounts managed through the TEAM deployment.

Recommendations Upgrade Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center to version 1.5.1 or later. Ensure any forked or derivative code is patched to incorporate the new fixes.