Research And Engineering Studio vulnerabilities
3 known vulnerabilities in Research And Engineering Studio from Amazon. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Research and Engineering Studio (RES): Improper Neutralization of Special Elements used in an OS Command
Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands on the cluster-manager EC2 instance via crafted input when using the
- 8.8 High severity
Research and Engineering Studio (RES): Improperly Controlled Modification of Dynamically-Determined Object Attributes
Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow an authenticated remote user to escalate privileges, assume the virtual desktop host instance
- 8.8 High severity
Research and Engineering Studio (RES): Improper Neutralization of Special Elements used in an OS Command
Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual deskto