Beveiligingsadvies

CVE-2026-82860

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-31 08:46:32
Laatst bijgewerkt 2026-08-31 14:41:07
Toegewezen door VulnCheck
CVSS-score 9.8
Status PUBLISHED

Beschrijving

@hulumi/policies versions before 1.3.2 fail to fully inspect inline and attached IAM policy evidence for the administrator-policy guardrail. Attackers can craft admin-equivalent policy paths that bypass policy evaluation controls.