Vulnerabilities
AWS patches command injection flaw in CodeCatalyst blueprints SDK
The vendor released version 0.3.156 to fix CVE-2026-85012, allowing attackers to run arbitrary commands via shell metacharacters.
CodeCatalyst
Everything Threat Times has reported about CodeCatalyst: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
AWS Fixes Insecure File Permissions for CodeCatalyst Tokens in VS Code Extension
The AWS Toolkit for Visual Studio Code cached bearer tokens with world-readable permissions, exposing credentials to local attackers.