anonhaven
Ad

CVE-2025-65200

NONE EPSS 0.18%
Обновлено 23 октября 2026
Docker
Параметр Значение
Поставщик Docker
Публичный эксплойт Нет

An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the _localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the docker container.

Ссылки 4

http://localstack.com
cve@mitre.org
https://cyberroute.github.io/post/2025-12-11-localstack-hack/
cve@mitre.org
https://github.com/localstack/localstack/blob/aba1ee84592d76f0a88dd286fcd83b650…
cve@mitre.org
https://github.com/localstack/localstack/pull/13293/
cve@mitre.org
Share Post Share Share Share

Связанные уязвимости

CVE-2026-115885

Docker

4,1

CVE-2026-106765

Docker

7,5

CVE-2026-57117

Docker

8,8

CVE-2026-54631

Docker

6,3

CVE-2026-115508

Unclecode

7,1