AWS QnABot on AWS

• CVE-2026-105811 Medium 6.5 Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS 0.3%
• CVE-2026-7191 High 7.2 Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS 0.4%