AWS virtual-engineering-workbench vulnerabilities

Latest AWS virtual-engineering-workbench CVEs

Newest publication first

1. CVE-2026-119085 Template injection in the publishing component of awslabs Virtual Engineering Workbench

   Published 2026-11-02

   Critical·CVSS 9.4 EPSS 0.55%

   Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench (VEW) could allow a remote authenticated third party to run arbitrary code with the permissions of the publishing Lambda's IAM role. This coul...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.