🎯 New Report #3897236: RCE in AWS Amplify CLI via Prototype Chain Traversal in amplify-velocity-template
🔺Severity: High
👽 Reporter: matty69v
⭐️ Reputation: 1413
🛠 State: resolved
💼 Team: AWS VDP
💵 Bounty: null
🕐 Submitted: 2026-07-28
⏰ Disclosed: 2026-10-13 17:25:07
📝 Summary: A remote code execution vulnerability was discovered in a template rendering library used by a cloud development framework. The vulnerability existed in the property resolution mechanism, which lacked filtering for prototype chain traversal. This allowed attackers who controlled template files to access the Function constructor and execute arbitrary operating system commands. The affected library was maintained by a cloud provider and used by approximately 60,000 developers weekly. The vulnerability could be exploited through malicious template files that appeared as legitimate resolver configurations while silently executing code during local development environments. No prototype chain guards were implemented in the codebase, unlike upstream versions which had added such protections in earlier releases.
📂 Report JSON File: 3897236
@hackeronereports