Known Vulnerabilities for Workspaces by Amazon
Listed below are 2 of the newest known vulnerabilities associated with "Workspaces" by "Amazon".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-41649 json | Outline is a service that allows for collaborative documentation. The `shares.create` API endpoint starting in version 0.86.0... | Not Provided | 2026-04-28 | 2026-04-29 |
| CVE-2026-41336 json | OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, enabli... | Not Provided | 2026-04-23 | 2026-04-24 |
| CVE-2026-41277 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignment vu... | Not Provided | 2026-04-23 | 2026-04-25 |
| CVE-2026-39425 json | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vul... | Not Provided | 2026-04-14 | 2026-04-14 |
| CVE-2026-39355 json | Genealogy is a family tree PHP application. Prior to 5.9.1, a critical broken access control vulnerability in the genealogy a... | Not Provided | 2026-04-07 | 2026-04-08 |
| CVE-2026-35668 json | OpenClaw before 2026.3.24 contains a path traversal vulnerability in sandbox enforcement allowing sandboxed agents to read ar... | Not Provided | 2026-04-10 | 2026-04-10 |
| CVE-2026-27769 json | Mattermost versions 10.11.x <= 10.11.12 fail to validate whether users were correctly owned by the correct Connected Workspac... | Not Provided | 2026-04-15 | 2026-04-15 |
| CVE-2026-26964 json | Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Versions 1.634.6 ... | Not Provided | 2026-02-20 | 2026-02-20 |
| CVE-2026-7791 json | Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for... | Not Provided | 2026-05-04 | 2026-05-04 |
| CVE-2026-7145 json | A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function destroy of the file app/Http/Contro... | Not Provided | 2026-04-27 | 2026-04-27 |