Package vulnerability, severity high
OpenJD Sessions and AWS Deadline Cloud worker agent untrusted search path (CVE-2026-126087)
Published
On Linux, OpenJD Sessions ran sudo by its bare name in a job-controlled environment, so a job could plant its own sudo executable on PATH. An authenticated user who can submit jobs could run arbitrary code as the worker agent user and obtain AWS credentials, including fleet role and EC2 instance identity credentials. Customer-managed Linux fleets are affected; service-managed fleets were fixed service-side and Windows workers are not affected.
What's affected
- openjd-sessions (pypi)<0.11.0
- deadline-cloud-worker-agent (pypi)<0.33.0
What to do
- Upgrade openjd-sessions to 0.11.0 or later and the Deadline Cloud worker agent to 0.33.0 or later on customer-managed Linux fleets.
- Make sure any forked or derivative code includes the fix.
- Until upgraded, limit deadline:CreateJob permission on queues to trusted principals.
- Review AWS CloudTrail for unexpected activity by the fleet role and queue roles.
Secrets to rotate if you were affected
Cloud credentials.
Check whether you were affected
Pharon tells teams automatically when this affects something they run. To check a machine, run this in Claude Code with the Pharon plugin, in the repository that uses it:
/pharon:check-incident openjd-sessions-deadline-cloud-worker-path-hijack-2026-11References
Notice openjd-sessions-deadline-cloud-worker-path-hijack-2026-11, signed with key feed-prod-2026-10 (Ed25519). The Pharon CLI verifies the signature before using a notice.