{"id":"CVE-2026-119085","kind":"vulnerability","aliases":["CVE-2026-119085"],"related":[],"title":"Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual…","description":"CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench\n\n### CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench\n\nBulletin ID: 2026-162-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/02/2026 09:30 AM PST\n\nDescription:\n\nVirtual Engineering Workbench (VEW) is an open-source platform where platform engineers define and publish development environments, and developers provision them on demand through a web portal. We identified CVE-2026-119085, where improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench (VEW) could allow a remote authenticated third party to run arbitrary code with the permissions of the publishing Lambda's IAM role. This could allow access to data and resources across all tenant projects. The code is reachable through a crafted CloudFormation template body containing template engine directives submitted through the product versioning API.\n\nImpacted versions: All commits before c146486 (PR #31, merged 2026-05-04)\n\nResolution:\n\nThis issue has been addressed in commit c146486 (PR #31). We recommend redeploying from the latest version of the main branch and ensuring any forked or derivative code is patched to incorporate the new fixes.\n\nWorkarounds:\n\nThere is no workaround that removes the issue. Until you redeploy, you can reduce impact by limiting which users can create or update product versions.\n\nReferences:\n\n- CVE-2026-119085\n\nAcknowledgement:\n\nWe would like to thank Trung Nguyen of CyStack for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","summary":"Virtual Engineering Workbench's publishing component fails to neutralize template directives in CloudFormation template bodies submitted through the product versioning API. An authenticated remote user can run arbitrary code with the publishing Lambda's IAM role, reaching data and resources across tenant projects.","severity":"critical","cvss":9.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aws","cloudformation","infrastructure","lab-disclosure","lambda","virtual-engineering-workbench"],"not_affected_if":["commit-c146486-or-later","no-untrusted-product-version-writers"],"how_to_check":"- Check whether your deployment of Virtual Engineering Workbench includes commit `c146486` (PR #31, merged 2026-05-04) or later.\n- Review which users can create or update product versions in the workbench.","fix":"- Redeploy Virtual Engineering Workbench from the latest version of the main branch, at or after commit `c146486`.\n- Patch any forked or derivative code to incorporate the fix.","status":"open","published_at":"2026-11-02T18:18:44+00:00","first_seen_at":"2026-11-02T18:03:13+00:00","triaged_at":"2026-11-02T18:03:41+00:00","updated_at":"2026-11-02T18:24:24+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-11-02T18:03:41Z","model":"claude-haiku-5-5","output":{"fix":"- Redeploy Virtual Engineering Workbench from the latest version of the main branch, at or after commit `c146486`.\n- Patch any forked or derivative code to incorporate the fix.","reach":"network","title":"AWS Virtual Engineering Workbench: template injection lets authenticated users run code","impact":"high","summary":"Virtual Engineering Workbench's publishing component fails to neutralize template directives in CloudFormation template bodies submitted through the product versioning API. An authenticated remote user can run arbitrary code with the publishing Lambda's IAM role, reaching data and resources across tenant projects.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["aws","virtual-engineering-workbench","cloudformation","lambda"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"Code runs with publishing Lambda's IAM role, reading tenant project data","analyst_note":"","how_to_check":"- Check whether your deployment of Virtual Engineering Workbench includes commit `c146486` (PR #31, merged 2026-05-04) or later.\n- Review which users can create or update product versions in the workbench.","plain_action":"","needs_analyst":false,"not_affected_if":["commit-c146486-or-later","no-untrusted-product-version-writers"],"who_is_affected":"Teams that self-host or deploy Amazon Virtual Engineering Workbench, where platform engineers publish development environments and developers provision them through a web portal. Builds from commit `c146486` or later, and deployments that do not let untrusted users create or update product versions, are not affected by the reported flaw. Forks and derivatives carry the bug until they incorporate the fix.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000782,"input_tokens":4657,"output_tokens":633,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-04':242C '-05':241C '-119085':20A,23A,80C,93C,156C,308C '-162':107C '-2026':19A,22A,79C,92C,155C,307C '09':119C '11/02/2026':118C '2026':106C,240C '30':120C '31':238C,253C 'access':202C 'acknowledg':309C 'across':75B,207C 'address':248C 'allow':179C,201C 'amazon':16A,173C 'api':55B,230C 'arbitrari':62B,187C 'attent':115C 'authent':57B,182C 'aw':24B,108C,110C 'aws-security@amazon.com':332C 'bodi':49B,220C 'branch':264C 'bulletin':104C 'c146486':236C,251C 'cloudform':25B,47B,218C 'code':63B,188C,212C,271C 'collabor':320C 'commit':234C,250C 'compon':14A,40B,86C,99C,171C 'concern':338C 'contain':221C 'content':111C 'coordin':326C 'could':178C,200C 'craft':217C 'creat':300C 'cve':18A,21A,78C,91C,154C,306C 'cystack':318C 'data':72B,204C 'date':117C 'defin':137C 'demand':147C 'deriv':270C 'descript':123C 'develop':140C,143C 'direct':45B,224C 'disclosur':29B,328C 'element':5A,162C 'email':331C 'engin':10A,33B,36B,89C,102C,125C,136C,167C,175C,223C 'ensur':266C 'environ':141C 'fail':41B 'fix':278C 'fork':268C 'iam':69B,197C 'id':105C 'identifi':153C 'impact':231C,294C 'import':113C 'improp':1A,158C 'incorpor':275C 'infrastructur':26B 'inject':82C,95C 'issu':245C,287C,323C 'lab':28B 'lab-disclosur':27B 'lambda':30B,67B,195C 'latest':259C 'like':312C 'limit':296C 'main':263C 'merg':239C 'neutral':2A,43B,159C 'new':277C 'nguyen':316C 'open':131C 'open-sourc':130C 'parti':184C 'patch':273C 'permiss':191C 'platform':133C,135C 'pleas':330C 'portal':151C 'pr':237C,252C 'process':329C 'product':53B,228C,303C 'project':77B,210C 'provis':144C 'pst':122C 'public':116C 'publish':13A,39B,66B,85C,98C,139C,170C,194C 'question':336C 'reach':71B 'reachabl':214C 'recommend':255C 'redeploy':256C,290C 'reduc':293C 'refer':305C 'remot':58B,181C 'remov':285C 'requir':114C 'resolut':243C 'resourc':74B,206C 'role':70B,198C 'run':61B,186C 'scope':109C 'secur':335C 'sourc':132C 'special':4A,161C 'submit':50B,225C 'templat':9A,44B,48B,81C,94C,166C,219C,222C 'tenant':76B,209C 'thank':314C 'third':183C 'trung':315C 'type':112C 'updat':302C 'use':6A,163C 'user':59B,298C 'version':54B,229C,232C,260C,304C 'vew':127C,177C 'virtual':17A,32B,35B,88C,101C,124C,174C 'virtual-engineering-workbench':31B 'vulner':327C 'web':150C 'workaround':279C,283C 'workbench':34B,37B,90C,103C,126C,176C 'would':311C","nicknames":[],"mitigations":[],"who_affected":"Teams that self-host or deploy Amazon Virtual Engineering Workbench, where platform engineers publish development environments and developers provision them through a web portal. Builds from commit `c146486` or later, and deployments that do not let untrusted users create or update product versions, are not affected by the reported flaw. Forks and derivatives carry the bug until they incorporate the fix.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aws","cloudformation","critical","infrastructure","labdisclosure","lambda","virtualengineeringworkbench"],"first_public_at":"2026-11-02T17:41:34+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"ff89ba41-3aa1-4d27-914a-91399e9639e5","poc_count":0,"sources":[{"source":"lab","external_id":"https://aws.amazon.com/security/security-bulletins/rss/2026-162-aws/#CVE-2026-119085","url":"https://aws.amazon.com/security/security-bulletins/rss/2026-162-aws/","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-02T18:03:13+00:00","fetched_at":"2026-11-02T18:03:13+00:00","note":"AWS: CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench"},{"source":"nvd","external_id":"CVE-2026-119085","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119085","severity":null,"published_at":"2026-11-02T18:18:44+00:00","modified_at":"2026-11-02T18:18:44+00:00","first_seen_at":"2026-11-02T18:24:24+00:00","fetched_at":"2026-11-02T18:24:24+00:00","note":null}],"documents":[{"id":53190,"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-162-aws/","title":"AWS: CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench","kind":"vendor","source":"vendor","publisher":"research","text":"CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench\n\n### CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench\n\nBulletin ID: 2026-162-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/02/2026 09:30 AM PST\n\nDescription:\n\nVirtual Engineering Workbench (VEW) is an open-source platform where platform engineers define and publish development environments, and developers provision them on demand through a web portal. We identified CVE-2026-119085, where improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench (VEW) could allow a remote authenticated third party to run arbitrary code with the permissions of the publishing Lambda's IAM role. This could allow access to data and resources across all tenant projects. The code is reachable through a crafted CloudFormation template body containing template engine directives submitted through the product versioning API.\n\nImpacted versions: All commits before c146486 (PR #31, merged 2026-05-04)\n\nResolution:\n\nThis issue has been addressed in commit c146486 (PR #31). We recommend redeploying from the latest version of the main branch and ensuring any forked or derivative code is patched to incorporate the new fixes.\n\nWorkarounds:\n\nThere is no workaround that removes the issue. Until you redeploy, you can reduce impact by limiting which users can create or update product versions.\n\nReferences:\n\n- CVE-2026-119085\n\nAcknowledgement:\n\nWe would like to thank Trung Nguyen of CyStack for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","published_at":"2026-11-02T17:41:34+00:00","relation":"mentions","confidence":null,"note":null},{"id":53250,"url":"https://github.com/awslabs/virtual-engineering-workbench/commit/c146486cec41f5b04fae57e9ce1a7fb40e695615","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}