Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-48037

Hulumi: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture

Description

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture. This issue has been patched in version 1.4.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

kerberosmansour hulumi

  • < 1.4.0affected

References