PT-2026-51548 · Aws · Language Servers For Aws

CVE-2026-12958

·

Published

2026-06-23

·

Updated

2026-07-08

CVSS v4.0

8.5

High

VectorAV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Language Servers for AWS versions prior to 1.69.0
Description Missing symlink validation may allow an arbitrary file write outside of the workspace trust boundary. This occurs when a local user opens a workspace containing a maliciously crafted symlink that resolves to a file path outside the trusted area.
Recommendations Upgrade to version 1.69.0 or higher.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-61

Related Identifiers

CVE-2026-12958
GHSA-6V3R-4P5C-MRP5

Affected Products

Language Servers For Aws