CVE-2026-85028CWE-379

CVE-2026-85028

High · published September 3, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit (aws-fpga) before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path in a world-writable temporary directory, which the installation step reads after elevating its own privileges.

To remediate this issue, users should upgrade to version 2.3.4.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
7.3 · CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00119 · 1.9th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2026-09-03T23:17Z
References (3)
https://aws.amazon.com/security/security-bulletins/2026-096-aws/ · ff89ba41-3aa1-4d27-914a-91399e9639e5https://github.com/aws/aws-fpga/releases/tag/v2.3.4 · ff89ba41-3aa1-4d27-914a-91399e9639e5https://github.com/aws/aws-fpga/security/advisories/GHSA-g4hc-wrmm-2x74 · ff89ba41-3aa1-4d27-914a-91399e9639e5
EPSS history
Timeline
  • 05 SEP 03:44Z
    EPSS moved — → 0%
    epss
  • 03 SEP 18:07Z
    Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit
    cvelistv5