AWS CICD-toolchain-for-serverless-applications: Incorrect privilege assignment in IAM policy
Summary
The AWS sample CI/CD toolchain for serverless applications, versions 1.0.7 through 1.0.10, assigns incorrect privileges in its IAM policy. An authenticated user with push access to the application source repository can deploy templates through the toolchain pipeline to escalate privileges. This can allow access to or modification of resources outside the application stack in the same AWS account.
Affected
- AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 (per AWS bulletin 2026-141-AWS and CNA record)
- Versions before 1.0.7: Unknown, to be confirmed with AWS
- Forks or derivative code based on the affected versions
Fixed in
- Version 1.0.11 (released 2026-10-15), fix commit fa3aa2b
Workaround
- No workaround available according to AWS.
Exploitation
- CISA SSVC assessment: exploitation none, automatable no, technical impact total.
- Not listed in CISA KEV. VulDB states no exploit is available.
- No public proof of concept or known exploitation as of the research date.
Our recommendation
- Identify all deployed copies of the toolchain and forks, and check their version.
- Upgrade existing toolchain stacks to version 1.0.11 or later and patch any forked code.
- Review IAM roles and policies created by existing toolchain stacks.
- Restrict push access to application repositories and enforce MFA on developer accounts.
- Monitor the AWS account for unexpected IAM changes.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- AWS Security Bulletin 2026-141-AWS aws.amazon.com
- GitHub Release 1.0.11 github.com
- GitHub Security Advisory GHSA-f76m-4xrx-pvq5 github.com
- OpenCVE CVE-2026-112407 app.opencve.io
- VulDB 423035 vuldb.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 01:22.
Original description (NVD)
Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source repository to escalate privileges and access or modify resources outside the application stack in the same AWS account via application templates deployed by the toolchain pipeline. To remediate this issue, users should upgrade existing toolchain stacks to version 1.0.11 or later.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.