PT-2026-85210 · Amazon · Aws Fpga Development Kit
CVE-2026-85028
·
Published
2026-09-03
·
Updated
2026-09-03
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
AWS FPGA Development Kit (aws-fpga) versions prior to 2.3.4
Description
The FPGA management tool installation component creates a temporary file in a directory with insecure permissions. This allows local users to execute arbitrary code with root privileges by placing crafted shell content at a predictable path within a world-writable temporary directory, which the installation process reads after elevating its privileges.
Recommendations
Upgrade to version 2.3.4.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Aws Fpga Development Kit