PT-2026-36929

CVE-2026-7791

·

Published

2026-05-04

·

Updated

2026-10-20

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Amazon WorkSpaces for Windows versions prior to 2.6.2034.0
Description Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service allows a local non-admin authenticated user to place arbitrary files into arbitrary locations. This bypasses file system permission protections and can lead to local privilege escalation to SYSTEM.
Recommendations Update to version 2.6.2034.0 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Related identifiers
CVE-2026-7791
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com