CVE-2026-119085 Template injection in the publishing component of awslabs Virtual Engineering Workbench

Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench VEW could allow a remote authenticated third party to run arbitrary code with the permissions of the publishing Lambda's IAM role. This could allow access to...

CVE-2026-119085 Template injection in the publishing component of awslabs Virtual Engineering Workbench

Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench VEW could allow a remote authenticated third party to run arbitrary code with the permissions of the publishing Lambda's IAM role. This could allow access to...

CVE-2026-119085

The awslabs Virtual Engineering Workbench (VEW) is vulnerable to a template injection flaw in its publishing component. The root cause is the improper neutralization of special elements used in a template engine, which allows a remote authenticated third party to execute arbitrary code using the ...