CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications
Cicd ยท 2026-10-20
Actions
Technical Details
| Affected Versions | =1.0.7 AND <=1.0.10 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-112407 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update existing CICD toolchain stacks to version 1.0.11 or later to address the privilege escalation vulnerability (CVE-2026-112407) and ensure secure deployment of serverless applications.
For Platform Teams
Deploy the patched version of CICD-toolchain-for-serverless-applications to maintain secure and compliant CI/CD pipelines for serverless application development.
For Executives
Implement the upgrade to CICD-toolchain-for-serverless-applications version 1.0.11 to mitigate the security risk of unauthorized privilege escalation and protect sensitive resources within the AWS account.