Aws Virtual Engineering Workbench
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Aws Virtual Engineering Workbench.
By the Year
In 2026 there have been 1 vulnerability in Aws Virtual Engineering Workbench with an average score of 8.8 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 8.80 |
It may take a day or so for new Virtual Engineering Workbench vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Aws Virtual Engineering Workbench Security Vulnerabilities
AWS VEW Template Engine XSS/Code Exec via CloudFormation Body
CVE-2026-119085
8.8 - High
- November 02, 2026
Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench (VEW) could allow a remote authenticated third party to run arbitrary code with the permissions of the publishing Lambda's IAM role. This could allow access to data and resources across all tenant projects. The code is reachable through a crafted CloudFormation template body containing template engine directives submitted through the product versioning API. To remediate this issue, users should redeploy from the latest version of awslabs/virtual-engineering-workbench.
1336
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Aws Virtual Engineering Workbench or by Aws? Click the Watch button to subscribe.
