CVE-2026-19360

Name of the Vulnerable Software and Affected Versions wongcyrus ExcelLexBot versions prior to 0.0.4

Description Improper privilege management exists within the Lambda Function Handler component, specifically affecting the ExcelLexBotS3TriggerFunction() function. This issue allows a remote attacker to perform manipulations that result in incorrect privilege handling. This flaw affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the ExcelLexBotS3TriggerFunction() function to minimize the risk of exploitation.