https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:21:30.134612+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-82857 CVE-2026-82857 — hulumi before v1.3.2 Privilege Escalation via IAM Policy 2026-10-08T06:21:30.150921+00:00

Affected: kerberosmansour hulumi

hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that allows role lifecycle operations on af-e2e-* roles without sufficient boundary restrictions. Attackers with the documented principal can create persistent higher-privilege roles in the sandbox account.