---
id: "GHSA-mf9w-9v72-cqm9"
kind: "vulnerability"
aliases: ["GHSA-mf9w-9v72-cqm9"]
title: "CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench"
severity: "high"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["aws", "cloudformation", "lab-disclosure", "lambda", "other", "virtual-engineering-workbench"]
not_affected_if: ["already-on-c146486-or-later"]
published_at: null
first_seen_at: "2026-11-03T19:07:47+00:00"
updated_at: "2026-11-03T19:08:03+00:00"
sources: [{"source": "lab", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-162-aws/", "first_seen_at": "2026-11-03T19:07:47+00:00"}]
---

# CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

Amazon Virtual Engineering Workbench, an open-source platform for defining and provisioning development environments, has a template injection flaw in its publishing component. A remote authenticated user can submit a crafted CloudFormation template through the product versioning API and run arbitrary code with the publishing Lambda's IAM role, reaching data and resources across tenant projects.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether you deploy Virtual Engineering Workbench and which commit it runs; the bulletin lists impacted versions as all commits before `c146486`
- Check whether your deployment includes PR #31 (merged 2026-05-04)
- Check who holds permission to create or update product versions

## Fix

- Redeploy from the latest version of the main branch, which includes commit `c146486` (PR #31)
- Patch any forked or derivative code to incorporate the fixes

## Timeline

- 2026-11-03T19:07:47+00:00 lab https://aws.amazon.com/security/security-bulletins/rss/2026-162-aws/ — AWS: CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

## Documents

- [mentions] AWS: CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench https://aws.amazon.com/security/security-bulletins/rss/2026-162-aws/

## From the sources

CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

### CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

Bulletin ID: 2026-162-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/02/2026 09:30 AM PST

Description:

Virtual Engineering Workbench (VEW) is an open-source platform where platform engineers define and publish development environments, and developers provision them on demand through a web portal. We identified CVE-2026-119085, where improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench (VEW) could allow a remote authenticated third party to run arbitrary code with the permissions of the publishing Lambda's IAM role. This could allow access to data and resources across all tenant projects. The code is reachable through a crafted CloudFormation template body containing template engine directives submitted through the product versioning API.

Impacted versions: All commits before c146486 (PR #31, merged 2026-05-04)

Resolution:

This issue has been addressed in commit c146486 (PR #31). We recommend redeploying from the latest version of the main branch and ensuring any forked or derivative code is patched to incorporate the new fixes.

Workarounds:

There is no workaround that removes the issue. Until you redeploy, you can reduce impact by limiting which users can create or update product versions.

References:

- CVE-2026-119085
- GHSA-mf9w-9v72-cqm9

Acknowledgement:

We would like to thank Trung Nguyen of CyStack for collaborating on this issue through the coordinated vulnerability disclosure process.

 Please email aws-security@amazon.com with any security questions or concerns.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_