CVE-2026-119085HighCVSS 8.8Amazon Virtual Engineering Workbench Template Injection in Publishing Component Leading to Cross-Tenant Remote Code Execution (opens in a new tab)
CyStack researcher Trung Nguyen discovered a template injection flaw in the publishing component of Amazon Virtual Engineering Workbench (VEW).
Amazon Virtual Engineering Workbench
Amazon Web Services





