CVE-2026-85012

creationtimestamp| type| source ---|---|--- 2026-09-03 19:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mun54bf6vr24 2026-09-03 19:04:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iofkhwgq3tae3 2026-09-03 20:32:56+00:00| seen|...

CVE-2026-85012 OS command injection in the Amazon CodeCatalyst blueprints SDK

Improper neutralization of special elements used in an OS command CWE-78 in the blueprint resynthesis framework in Amazon Web Services codecatalyst-blueprints before 0.3.156 might allow a user with permission to commit to a repository in the project to execute arbitrary commands in the blueprint...