CVE-2026-82860

CVE-2026-82860 affects @hulumi/policies versions before 1.3.2 , where the package fails to fully inspect inline and attached IAM policy evidence for the administrator-policy guardrail. This allows attackers to craft admin-equivalent policy paths that bypass policy evaluation controls, rated CVSS ...

PT-2026-83737

@hulumi/policies versions before 1.3.2 fail to fully inspect inline and attached IAM policy evidence for the administrator-policy guardrail. Attackers can craft admin-equivalent policy paths that bypass policy evaluation controls...