8 matches found
CVE-2026-82859
hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...
CVE-2026-82859 hulumi before v1.3.2 SCP Template Tag-on-Create Bypass
hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...
CVE-2026-82859 hulumi before v1.3.2 SCP Template Tag-on-Create Bypass
hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...
CVE-2026-82859
hulumi versions before v1.3.2 contain a flawed deployment SCP template that permits tag-on-create bypasses against hulumi:iac-role protections, allowing attackers to circumvent intended IAM boundary restrictions in downstream deployments. The vulnerability is scored CVSS 3.1: 9.8 (CRITICAL) and C...
EUVD-2026-68447
hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...
CVE-2026-82859 hulumi before v1.3.2 SCP Template Tag-on-Create Bypass
hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...
CVE-2026-82859: Improper Access Control
hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...
PT-2026-83736
hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...