CVE-2025-65200

An issue was discovered in localstack version 4.9.2 that allows for arbitrary code execution . The vulnerability occurs when a user provides a web-accessible URL containing crafted content via the templateURL parameter in the _localstack/cloudformation/deploy endpoint. If exploited, the hosted co...

CVE-2025-65200

An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the...

EUVD-2025-211174

An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the...