An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the _localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the docker container.
CVE-2025-65200
NONE
EPSS 0.18%
Updated Oct 23, 2026
Docker
CVE Details
CVE ID
CVE-2025-65200
Published Date
Oct 22, 2026
Vendor
Docker
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.18%
Likelihood of exploitation in next 30 days
Percentile:
7.3th percentile (higher than 7.3% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory