EUVD-2026-95128

Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later...

Vulnerability related to permission and access control issues in AWS Kiro IDE

Versions of AWS Kiro IDE prior to 0.11.133 contain a permission and access control vulnerability. This vulnerability stems from incorrect default permissions; global read permissions are used instead of owner-restricted permissions. As a result, other local users or processes may gain access to...