This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-7791 | BDVDB-2026-330293 Detail

AmazonWorkspaces

Description#

Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local non-admin authenticated user to place arbitrary files into arbitrary locations bypassing file system permission protections, leading to local privilege escalation to SYSTEM.

Impact#

CAPEC-29: Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions

Weaknesses#

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.