Amazon amazon-connect-salesforce-lambda vulnerabilities (CVE)

CVE records published for Amazon amazon-connect-salesforce-lambda, newest first. Follow to get an email when a new one appears.

1 results

8.1High

CVE-2026-94384 1 month ago

Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda

Amazon amazon-connect-salesforce-lambda

Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitl…