CVE-2026-12957 json
Arbitrary Code Execution in Language Servers for AWS
published 2026-06-23 4 mo ago modified 2026-10-26 13 d ago also GHSA-xhcr-j4j9-3gh7 , EUVD-2026-38488
- cvss
- 7.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 14%
- public exploits
- 0
- none known
Summary
Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all supported platforms may allow a for arbitrary code execution. If a local user opens a maliciously crafted workspace, any commands within the project configuration files may be automatically executed. This issue requires the user to trust the workspace when prompted.
To remediate this issue, users should upgrade to Language Servers for AWS version 1.65.0 or higher.
Patch / fix
- npm @aws/lsp-codewhisperer 0.0.113
- Amazon Web Services Language Servers for AWS 1.65.0
- github.com/Amazon-Q-Developer/language-servers@7b8595a commit
- github.com/Amazon-Q-Developer/language-servers@f5aa1a3 commit
- github.com/Amazon-Q-Developer/language-servers#2708 pull request
- github.com/Amazon-Q-Developer/language-servers#2711 pull request
- github.com/Amazon-Q-Developer/language-servers/releases/tag/agentic-r… release
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 4 mo ago
Exploit prediction
0.23% chance of exploitation in the next 30 days, higher than 14% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 8.5 | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CNA | 4.0 | 8.5 | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| npm | @aws/lsp-codewhisperer | <0.0.113 |
0.0.113 |
Affected products
- Amazon Web Services Language Servers for AWS
Classification
- Weakness
-
- CWE-732 Incorrect Permission Assignment for Critical Resource
References
-
github.com
/Amazon-Q-Developer/language-servers/pull/2708
web
-
github.com
/Amazon-Q-Developer/language-servers/pull/2711
web
-
github.com
/Amazon-Q-Developer/language-servers/commit/7b8595a4e638562f79d5f71dcf22b0c700490458
web
-
github.com
/Amazon-Q-Developer/language-servers/commit/f5aa1a3b25aa38bfe8dd0e830b5839e1cea1d410
web
-
aws.amazon.com
/security/security-bulletins/2026-047-aws/
vendor-advisory
-
github.com
/aws/language-servers/security/advisories/GHSA-xhcr-j4j9-3gh7
third-party-advisory, web
-
nvd.nist.gov
/vuln/detail/CVE-2026-12957
advisory
-
aws.amazon.com
/security/security-bulletins/2026-047-aws
web
-
github.com
/Amazon-Q-Developer/language-servers/releases/tag/agentic-rc-1.65.0
web
-
github.com
/aws/language-servers
package
Sources
- CVE List CVE-2026-12957
- GitHub Advisory GHSA-xhcr-j4j9-3gh7
- NVD CVE-2026-12957
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.