AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AWSAWS-2026-025

Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent

AWS

CVE-2026-7791 · Published Oct 14, 2026

High7.8
No fix yet
AWS advisory

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeverityOct 10Severity: Unrated to High
Details and references
Severity from
NVD

More AWS advisories

All AWS
Medium 5.3Oct 14RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3...CVE-2026-110310no fix yetHigh 7.5Oct 14Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows...CVE-2026-15957no fix yetMedium 6.5Oct 14Improper Link Resolution in Auth.GetUserPrivateKey in AWS Research and Engineering StudioCVE-2026-14904no fix yetHigh 7.3Oct 14Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK...CVE-2026-12530no fix yetMedium 4.7Oct 14Key commitment policy bypass via shared key cache in AWS Encryption SDK for PythonCVE-2026-6550no fix yetMedium 6.5Oct 14Issue with FreeRTOS-Plus-TCP - IPv6 Router Advertisement Memory Safety IssuesAWS-2026-023no fix yet