{"id":"GHSA-f76m-4xrx-pvq5","kind":"vulnerability","aliases":["GHSA-f76m-4xrx-pvq5"],"related":[],"title":"CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications","description":"CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications\n\n### CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications\n\nBulletin ID: 2026-141-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/20/2026 13:30 PM PDT\n\nDescription:\n\nCICD-toolchain-for-serverless-applications is an AWS sample application that provisions a CI/CD pipeline for serverless applications through the AWS Serverless Application Repository. We identified CVE-2026-112407, an incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications before 1.0.11 that allows remote authenticated users with push access to the application source repository to escalate privileges and access or modify resources outside the application stack in the same AWS account via application templates deployed by the toolchain pipeline.\n\nImpacted versions: =1.0.7 AND <=1.0.10\n\nResolution:\n\nThis issue has been addressed in CICD-toolchain-for-serverless-applications version 1.0.11. We recommend upgrading existing toolchain stacks to version 1.0.11 or later and ensuring any forked or derivative code is patched to incorporate the new fixes.\n\nWorkarounds:\n\nThere is no workaround available.\n\nReferences:\n\n- CVE-2026-112407\n- GHSA-f76m-4xrx-pvq5\n\nAcknowledgement:\n\nWe would like to thank Changli from Xidian University for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","summary":"The AWS sample CI/CD toolchain for serverless applications, versions 1.0.7 through 1.0.10, grants an overly broad IAM policy. A remote authenticated user with push access to the source repository can escalate privileges and reach or change resources outside the application stack in the same AWS account.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aws","cicd","iam","lab-disclosure","serverless","vendor"],"not_affected_if":["not-deployed","version-1.0.11-or-later"],"how_to_check":"- Check the installed toolchain stack version in the AWS account (CloudFormation stack of the CICD-toolchain-for-serverless-applications application), looking for a version between `1.0.7` and `1.0.10`.\n- Review the IAM role and policy attached to the toolchain pipeline for statements broader than the application stack.","fix":"- Upgrade existing toolchain stacks to `1.0.11` or later.\n- Patch any forked or derivative code to include the fixes.\n- No workaround is available according to the bulletin.","status":"open","published_at":"2026-10-20T00:00:00+00:00","first_seen_at":"2026-10-24T19:43:42+00:00","triaged_at":"2026-10-25T05:06:15+00:00","updated_at":"2026-10-25T05:06:15+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-10-25T05:06:15Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade existing toolchain stacks to `1.0.11` or later.\n- Patch any forked or derivative code to include the fixes.\n- No workaround is available according to the bulletin.","reach":"network","title":"AWS CICD toolchain for serverless: IAM policy lets repo writers escalate privileges","impact":"high","summary":"The AWS sample CI/CD toolchain for serverless applications, versions 1.0.7 through 1.0.10, grants an overly broad IAM policy. A remote authenticated user with push access to the source repository can escalate privileges and reach or change resources outside the application stack in the same AWS account.","category":"vendor","nicknames":[],"who_cares":["aws","serverless","cicd","iam"],"confidence":0.7,"needs_auth":"yes","worst_case":"Attacker escalates IAM privileges and modifies resources outside the stack in the account","analyst_note":"Confirm the exact IAM permissions granted in 1.0.7 to 1.0.10 at https://aws.amazon.com/security/security-bulletins/rss/2026-141-aws/ and whether the flaw is reachable beyond repository push access.","how_to_check":"- Check the installed toolchain stack version in the AWS account (CloudFormation stack of the CICD-toolchain-for-serverless-applications application), looking for a version between `1.0.7` and `1.0.10`.\n- Review the IAM role and policy attached to the toolchain pipeline for statements broader than the application stack.","needs_analyst":true,"not_affected_if":["version-1.0.11-or-later","not-deployed"],"who_is_affected":"Teams that deployed the AWS CICD-toolchain-for-serverless-applications sample in versions `1.0.7` through `1.0.10` are exposed, particularly where many people hold push access to the application repository. Teams on `1.0.11` or later, or who never deployed this sample, can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000742,"input_tokens":3934,"output_tokens":697,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112407':3A,81C,95C,156C,267C '-141':110C '-2026':2A,80C,94C,155C,266C '1.0.10':44B,217C '1.0.11':174C,232C,241C '1.0.7':42B,215C '10/20/2026':121C '13':122C '2026':109C '30':123C '4xrx':18A,23A,271C 'access':57B,182C,192C 'account':78B,204C 'acknowledg':273C 'address':223C 'allow':176C 'applic':14A,40B,72B,92C,106C,132C,137C,145C,150C,172C,185C,198C,206C,230C 'assign':6A,84C,98C,160C 'attent':118C 'authent':53B,178C 'avail':263C 'aw':8A,25B,34B,77B,86C,100C,111C,113C,135C,148C,166C,203C 'aws-security@amazon.com':296C 'broad':48B 'bulletin':107C 'chang':68B,279C 'ci/cd':36B,141C 'cicd':10A,26B,88C,102C,128C,168C,226C 'cicd-toolchain-for-serverless-appl':9A,87C,101C,127C,167C,225C 'code':250C 'collabor':284C 'concern':302C 'content':114C 'coordin':290C 'cve':1A,79C,93C,154C,265C 'date':120C 'deploy':208C 'deriv':249C 'descript':126C 'disclosur':30B,292C 'email':295C 'ensur':245C 'escal':63B,189C 'exist':236C 'f76m':17A,22A,270C 'fix':257C 'fork':247C 'ghsa':16A,21A,269C 'ghsa-f76m-4xrx-pvq5':15A,20A,268C 'grant':45B 'iam':27B,49B,163C 'id':108C 'identifi':153C 'impact':213C 'import':116C 'incorpor':254C 'incorrect':4A,82C,96C,158C 'issu':220C,287C 'lab':29B 'lab-disclosur':28B 'later':243C 'like':276C 'modifi':194C 'new':256C 'outsid':70B,196C 'over':47B 'patch':252C 'pdt':125C 'pipelin':142C,212C 'pleas':294C 'pm':124C 'polici':50B,164C 'privileg':5A,64B,83C,97C,159C,190C 'process':293C 'provis':139C 'public':119C 'push':56B,181C 'pvq5':19A,24A,272C 'question':300C 'reach':66B 'recommend':234C 'refer':264C 'remot':52B,177C 'repositori':61B,151C,187C 'requir':117C 'resolut':218C 'resourc':69B,195C 'sampl':35B,136C 'scope':112C 'secur':299C 'serverless':13A,31B,39B,91C,105C,131C,144C,149C,171C,229C 'sourc':60B,186C 'stack':73B,199C,238C 'templat':207C 'thank':278C 'toolchain':11A,37B,89C,103C,129C,169C,211C,227C,237C 'type':115C 'univers':282C 'upgrad':235C 'user':54B,179C 'vendor':32B 'version':41B,214C,231C,240C 'via':205C 'vulner':291C 'workaround':258C,262C 'would':275C 'xidian':281C","nicknames":[],"mitigations":[],"who_affected":"Teams that deployed the AWS CICD-toolchain-for-serverless-applications sample in versions `1.0.7` through `1.0.10` are exposed, particularly where many people hold push access to the application repository. Teams on `1.0.11` or later, or who never deployed this sample, can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T00:00:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"lab","external_id":"https://aws.amazon.com/security/security-bulletins/rss/2026-141-aws/#GHSA-f76m-4xrx-pvq5","url":"https://aws.amazon.com/security/security-bulletins/rss/2026-141-aws/","severity":null,"published_at":"2026-10-20T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-24T19:43:42+00:00","fetched_at":"2026-10-24T19:43:42+00:00","note":"AWS: CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications"}],"documents":[{"id":2472,"url":"https://github.com/aws-samples/aws-lambda-sample-applications/security/advisories/GHSA-f76m-4xrx-pvq5","title":"GHSA-f76m-4xrx-pvq5: Incorrect privilege assignment in CICD-toolchain-for-serverless-applications","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":2959,"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-141-aws/","title":"AWS: CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications","kind":"advisory","source":"lab","text":"CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications\n\n### CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications\n\nBulletin ID: 2026-141-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/20/2026 13:30 PM PDT\n\nDescription:\n\nCICD-toolchain-for-serverless-applications is an AWS sample application that provisions a CI/CD pipeline for serverless applications through the AWS Serverless Application Repository. We identified CVE-2026-112407, an incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications before 1.0.11 that allows remote authenticated users with push access to the application source repository to escalate privileges and access or modify resources outside the application stack in the same AWS account via application templates deployed by the toolchain pipeline.\n\nImpacted versions: =1.0.7 AND <=1.0.10\n\nResolution:\n\nThis issue has been addressed in CICD-toolchain-for-serverless-applications version 1.0.11. We recommend upgrading existing toolchain stacks to version 1.0.11 or later and ensuring any forked or derivative code is patched to incorporate the new fixes.\n\nWorkarounds:\n\nThere is no workaround available.\n\nReferences:\n\n- CVE-2026-112407\n- GHSA-f76m-4xrx-pvq5\n\nAcknowledgement:\n\nWe would like to thank Changli from Xidian University for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","published_at":"2026-10-20T00:00:00+00:00","relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}