CVE Intelligence

AWS Aws-toolkit-vscode vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting AWS Aws-toolkit-vscode: 1 record(s), with affected versions and fixes.

CVE-2026-107332 Medium · 5.5 CWE-276 Oct 8, 2026
Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code
Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later.