Περιγραφή
Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a local user opens a workspace with a maliciously crafted symlink that resolves to a file path outside the workspace trust boundary. To remediate this issue, users should upgrade to version 1.69.0 or higher.
CVSS 7.8EPSS 0.255%Κίνδυνος 0.8
Προβολή πηγής- Δημοσίευση
- 2026-06-23 17:16:41
- Επηρεαζόμενες εκδόσεις
- <1.69.0
- Τύπος
- Κρίσιμο λογισμικό
- Διάνυσμα
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H