Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-7791

Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMZN

Description

Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local non-admin authenticated user to place arbitrary files into arbitrary locations bypassing file system permission protections, leading to local privilege escalation to SYSTEM.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Amazon Workspaces

Default version status: unaffected

  • 0 to < 2.6.2034.0affected

References