AWS Patches Critical RCE and Escalate Privileges in Research and Engineering Studio

AWS published a security bulletin detailing three severe vulnerabilities in Research and Engineering Studio (RES) — two OS command injection flaws and one privilege-escalation issue — affecting older RES versions and enabling authenticated attackers to execute arbitrary commands as root, compromise cluster-manager instances, and assume instance profiles; AWS resolved these issues in RES 2026.03 and provided patches and workarounds.