High severity7.8NVD Advisory· Published May 4, 2026· Updated May 5, 2026

CVE-2026-7791

Description

Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local non-admin authenticated user to place arbitrary files into arbitrary locations bypassing file system permission protections, leading to local privilege escalation to SYSTEM.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Blackberry/Workspacesllm-fuzzy
Range: <2.6.2034.0

Patches

Vulnerability mechanics

References

aws.amazon.com/security/security-bulletins/2026-025-aws/nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000