Amazon Log4j-cve-2021-44228-hotpatch vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Amazon Log4j-cve-2021-44228-hotpatch: 1 record(s), with affected versions and fixes.

CVE-2026-85656 High · 7.8 CWE-78 Sep 4, 2026

OS command injection in Amazon log4j-cve-2021-44228-hotpatch

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters.