Improper authentication token handling in the Amazon WorkSpaces client for Linux

2025 025 ยท 2026-06-05

Actions

Rate this issue

Technical Details

Affected Versions 2023.0, 2024.8
Regions all
CVE IDs CVE-2025-12779
Migration Required Yes
Cost Impact Neutral

What This Means

For DevOps Teams

Update the Amazon WorkSpaces client for Linux to version 2025.0 to address the security vulnerability (CVE-2025-12779) and prevent unauthorized access to user workspaces.

For Platform Teams

Deploy the latest Amazon WorkSpaces client for Linux version 2025.0 to ensure secure authentication token handling and protect user workspaces from potential security breaches.

For Executives

Implement the updated Amazon WorkSpaces client for Linux version 2025.0 to mitigate the risk of unauthorized access due to improper authentication token handling, ensuring the security of user workspaces.

Source

View original AWS announcement โ†’

Weekly AWS Digest in Your Inbox

No spam, no headlines. Just a weekly summary of the 3โ€“7 AWS changes that matter for DevOps and Platform teams.

๐Ÿ“ง Exactly 1 email per week โ€ข Every Tuesday โ€ข Unsubscribe anytime

Today: AWS only. Coming next: Azure and other major clouds.