CVE-2025-45471

Insecure permissions in measure-cold-start v1.4.1 allows attackers to escalate privileges and compromise the customer cloud account...

CVE-2025-45471

The SAR-measure-cold-start AWS Step Functions state machine, open-sourced by Lumigo, contains a vulnerability in version v1.4.1 . The root cause is incorrect permission assignment (CWE-732), which allows an attacker to escalate privileges and potentially compromise the customer cloud account . To...

CVE-2025-45471

Insecure permissions in measure-cold-start v1.4.1 allows attackers to escalate privileges and compromise the customer cloud account...