CVE-2026-112407

AWS CICD-toolchain-for-serverless-applications versions 1.0.7 through 1.0.10 are affected by an incorrect privilege assignment within the IAM policy. This flaw allows remote authenticated users with push access to the application source repository to escalate privileges. Attackers can leverage ap...