Amazon Web Services vulnerabilities
We track 4 vulnerabilities in Amazon Web Services products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 23, 2026.
Latest Amazon Web Services vulnerabilities
- 7.8 High severity
Language Servers for AWS: UNIX Symbolic Link (Symlink) Following
Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a local user opens a workspace with a maliciously crafted symlink that resolves to a file path outside the wor
- 7.8 High severity
Language Servers for AWS: Incorrect Permission Assignment for Critical Resource
Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all supported platforms may allow a for arbitrary code execution. If a local user opens a maliciously crafted workspace, any commands within the project configuration file
- 8.8 High severity
Hotdog: Improper Privilege Management
Incomplete fix for CVE-2021-3101. Hotdog, prior to v1.0.2, did not mimic the resource limits, device restrictions, or syscall filters of the target JVM process. This would allow a container to exhaust the resources of the host, modify devices, or make syscalls
- 8.8 High severity
log4j-cve-2021-44228-hotpatch: Improper Privilege Management
Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotpatch is applied to.