CVE-2026-85028: Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit
Fpga Development ยท 2026-10-21
Actions
Technical Details
| Affected Versions | < 2.3.4 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-85028 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update the AWS FPGA Development Kit to version 2.3.4 to address the security vulnerability (CVE-2026-85028) and prevent potential exploitation by local users.
For Platform Teams
Deploy the updated AWS FPGA Development Kit to ensure the security of the platform and maintain the trust of users in the service.
For Executives
Implement the security patch for the AWS FPGA Development Kit to mitigate the risk of arbitrary code execution with root privileges, ensuring the platform's security and integrity.