Beveiligingsadvies

CVE-2026-5707

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-06 21:25:48

Laatst bijgewerkt 2026-04-07 15:09:31

Toegewezen door AMZN

CVSS-score 8.8

Status PUBLISHED

Beschrijving

Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual desktop host via a crafted session name. To remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to their existing environment.

← Alle CVE's bekijken Bekijk op cve.org ↗