CVE-2026-81838 - Zip Slip path traversal in awsdac (diagram-as-code)
AWS ยท 2026-10-21
Actions
Technical Details
| Affected Versions | 0.10 through 0.23 (inclusive) |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-81838 |
| Migration Required | Yes |
| Cost Impact | Neutral |
What This Means
For DevOps Teams
Update awsdac to version 0.24 to address the Zip Slip vulnerability (CVE-2026-81838), ensuring that definition files are processed securely and preventing potential arbitrary code execution on local machines.
For Platform Teams
Deploy the updated awsdac version (0.24) across all environments to mitigate the Zip Slip vulnerability (CVE-2026-81838), enhancing the security posture of local machines processing architecture diagrams.
For Executives
Implement the latest awsdac version (0.24) to mitigate the Zip Slip vulnerability (CVE-2026-81838) and protect against potential arbitrary code execution, ensuring the security of local machines processing untrusted definition files.