Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-82863

@hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

hulumi baseline

Default version status: unaffected

  • 0 to < 1.3.2affected
  • 1.3.2unaffected
pkg:npm/%40hulumi/baseline

References