CVE-2026-21002-Serverless-Cold-Start-Credential-Leakage-via-Reused-tmp

CVE-2026-21002 – 通过复用的 /tmp 导致的无服务器冷启动凭据泄露 程序代码（Python AWS Lambda 模拟） lambdafuncsim.py - Simulated serverless function import os, tempfile, time SECRETFILE = '/tmp/credentials' reused across warm starts def handlerevent: On first invocation, write a secret if not os.path.existsSECRETFILE: with...