VYPR

virtual-engineering-workbench

by Awslabs

CVEs (1)

  • CVE-2026-119085HigNov 2, 2026
    risk 0.50cvss 8.8epss —

    Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench (VEW) could allow a remote authenticated third party to run arbitrary code with the permissions of the publishing Lambda's IAM role. This…