Tracking: CVE-2026-12958
Severity: High
Who is affected
The affected releases are:
| Component | Affected | First fixed release |
|---|---|---|
| Language Servers for AWS | Before 1.69.0 | 1.69.0 |
@aws/lsp-codewhisperer |
Before 0.0.117 | 0.0.117 |
The user must open and trust a malicious workspace. The agent must then write through an attacker-placed symlink.
How the attack works
The vulnerable write path follows a workspace symlink to a destination outside the approved directory without requiring additional approval. A path that appears local to the repository can therefore modify another file the user account is allowed to write.
The impact depends on the destination. Overwriting configuration or files later executed by other software can have consequences beyond the workspace itself.
What to do
- Upgrade the relevant AWS component to its fixed release or later. Check both package lines when inventorying installations.
- Review symlinks before trusting unfamiliar workspaces and avoid agent writes in repositories you have not inspected.
- If a suspicious workspace was used, inspect files outside it that symlinks referenced. The vendor does not identify a workaround equivalent to patching.