CVE-2026-107332 - Insecure default file permissions on cached credentials in AWS Toolkit for Visual Studio Code
Toolkit For ยท 2026-10-08
Actions
Technical Details
| Affected Versions | < 4.10.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-107332 |
| Migration Required | Yes |
| Cost Impact | Neutral |
What This Means
For DevOps Teams
Update AWS Toolkit for Visual Studio Code to version 4.10.0 to address the insecure default file permissions on cached credentials and ensure secure token handling.
For Platform Teams
Adopt the updated AWS Toolkit for Visual Studio Code to incorporate secure token caching and reduce the risk of unauthorized access to sensitive credentials.
For Executives
Implement the latest version of AWS Toolkit for Visual Studio Code to mitigate the risk of unauthorized access to cached credentials and enhance overall security posture.