CVE-2026-112407

Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in AWS CICD Toolchain for Serverless Applications

Publication date: 2026-10-20

Last updated on: 2026-10-28

Assigner: AMZN

Description

Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source repository to escalate privileges and access or modify resources outside the application stack in the same AWS account via application templates deployed by the toolchain pipeline. To remediate this issue, users should upgrade existing toolchain stacks to version 1.0.11 or later.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-28

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-112407

Affected Vendors & Products

Vendor	Product	Version / Range
AWS	CICD-toolchain-for-serverless-applications	1.0.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-266	A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability involves incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications versions 1.0.7 through 1.0.10. Remote authenticated users with push access to the application source repository can escalate privileges and access or modify resources outside the application stack in the same AWS account via application templates deployed by the toolchain pipeline.

Detection Guidance

To detect this vulnerability, check the IAM policies of your AWS CICD-toolchain-for-serverless-applications stacks for incorrect privilege assignments. Review policies for excessive permissions granted to users with push access. Use AWS CLI commands like 'aws cloudformation describe-stacks' to list stacks and 'aws cloudformation get-template' to inspect stack templates for policy misconfigurations.

Impact Analysis

An attacker with push access to the repository could escalate their privileges to access or modify resources outside the intended application stack. This could lead to unauthorized data access, data manipulation, or disruption of services within the AWS account.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, which may violate compliance requirements such as GDPR (data protection) or HIPAA (health information privacy). Organizations using this toolchain may face regulatory penalties or loss of compliance certifications.

Mitigation Strategies

Upgrade existing toolchain stacks to version 1.0.11 or later to remediate the privilege assignment issue.

Hi! I’m here to help you understand CVE-2026-112407. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...