CVE-2025-69723: n/a

CVE-2025-69723 is a reflected XSS vulnerability affecting localstack version 4.9.2. An attacker can exploit this vulnerability by crafting a URL that, when visited by a user, causes arbitrary JavaScript code to execute within the user's browser context. This type of vulnerability can lead to session hijacking, defacement, or other client-side attacks depending on the malicious script delivered. There is no information about known exploits in the wild or a vendor patch at this time.

Successful exploitation allows execution of arbitrary JavaScript in the victim's browser, potentially leading to theft of sensitive information, session tokens, or other malicious actions performed on behalf of the user. The impact is limited to the client side and requires user interaction with a crafted URL.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid clicking on untrusted or suspicious URLs that could exploit this vulnerability.