Search vulnerabilities

Results 1

Export CSV
CVE-2026-107332

Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code

Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Aws