CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent
Workspaces Skylight ยท 2026-09-29
Actions
Technical Details
| Affected Versions | < 2.6.2034.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-7791 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update the Amazon Skylight Workspace Config Service to version 2.6.2034.0 to address the CVE-2026-7791 vulnerability and prevent potential privilege escalation attacks.
For Platform Teams
Deploy the latest version of the Amazon Skylight Workspace Config Service to enhance security and maintain the integrity of the WorkSpaces environment.
For Executives
Implement the Skylight Agent update to mitigate the risk of local privilege escalation attacks, ensuring the security and integrity of Amazon WorkSpaces environments.
Source
Related Workspaces Skylight Updates
- CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent (2026-09-25)
- Amazon WorkSpaces adds support for NVIDIA Blackwell GPU instances (2026-09-16)
- CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent (2026-08-20)
- Amazon WorkSpaces Applications now offers in-console monitoring capabilities (2026-08-19)