Language Servers for AWS vulnerabilities

2 known vulnerabilities in Language Servers for AWS from Amazon Web Services. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Language Servers for AWS: UNIX Symbolic Link (Symlink) Following

  CVE-2026-12958Jun 23, 2026Amazon Web Services

  Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a local user opens a workspace with a maliciously crafted symlink that resolves to a file path outside the wor

• 7.8 High severity

  Language Servers for AWS: Incorrect Permission Assignment for Critical Resource

  CVE-2026-12957Jun 23, 2026Amazon Web Services

  Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all supported platforms may allow a for arbitrary code execution. If a local user opens a maliciously crafted workspace, any commands within the project configuration file