VulnerabilityPublished 26 Jun 2026

Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories

Source SecurityWeek

Mentioned vulnerabilities

Severity

Medium

Rated by Threat Radar

Data as of 30 Jun 2026, 00:08 UTC

What to do

AI-suggested

AWS has released official patches for this vulnerability across all affected Amazon Q Developer plugins and the language server (version 1.65.0). The language server updates automatically unless blocked by network configurations, so most users require no action beyond reloading their IDE to trigger the update. If auto-updates are blocked, users should manually upgrade to the latest version of the Amazon Q Developer plugin for their IDE. New users receive the patched version by default. No additional mitigation steps are required beyond applying these updates.

Description

AWS has patched the vulnerability and published its own advisory to inform customers about the potential impact. The post Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories appeared first on SecurityWeek .

Impact

Attackers could exploit this vulnerability by tricking developers into opening malicious code repositories, which would then execute commands automatically to steal active cloud credentials and API keys. This could lead to unauthorized access to cloud infrastructure and services associated with the compromised credentials. The attack could occur silently without user warning, affecting both local development environments and cloud resources. The vulnerability impacts developers authenticated to AWS or other cloud services using the Amazon Q Developer extension or related plugins.

Summary

Researchers at Wiz disclosed a vulnerability in the Amazon Q Developer extension and related plugins that caused automatic execution of configuration files embedded in a workspace without user consent. This allowed malicious repositories to run attacker-controlled commands silently, capturing cloud credentials and API keys loaded in the developer's environment. The vulnerability affects multiple IDE plugins including VS Code, JetBrains, Eclipse, and Visual Studio, as well as the language server. AWS was notified on April 20, 2026, and patched the issue by May 12, 2026, releasing version 1.65.0 of the language server. The vulnerability is tracked as CVE-2026-12957, with a related symbolic link handling issue CVE-2026-12958 also fixed. AWS language server updates automatically unless network configurations block it, minimizing required user action. Similar issues have been noted in other AI coding tools.

References

securityweek.com/amazon-q-flaw-enabled-cloud-credential-theft-via-malicious-repositories/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 26 Jun 2026, 15:36 UTC

References

Community reviews

Related threats