Live › vulnerability › CVE-2025-65200
Go to dashboardLocalStack 4.9.2 fetches a CloudFormation template from a URL passed to its deploy endpoint, and the fetched content is executed inside the Docker container. An attacker who controls a web-hosted file and can submit a deploy request can run arbitrary code in that container.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running LocalStack 4.9.2 where the CloudFormation deploy endpoint accepts requests from users or networks they do not fully trust. Exposure depends on who can reach the endpoint and whether it is limited to local developer use. Teams on other versions or with the endpoint closed off are not described by the sources as affected.
No product ranges from the sources yet.
localstack --version or check the image tag in use and confirm whether it is 4.9.2_localstack/cloudformation/deploy endpoint is reachable from untrusted networksUnknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the _localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the docker container.
This page as .md · .json · in your agent: get_signal("CVE-2025-65200")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.