Aws — PoC Archivehttps://poc.intelseclab.com/tags/aws/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Supply Chain Command Injection in AWS CDK's NodejsFunction — CVE-2026-11417https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-11417-aws-cdk-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-11417-aws-cdk-rce/High severity (CVSS 3.1) — cloud · CVE-2026-11417. Status: PoC. Affects: aws-cdk-lib (npm package), NodejsFunction L2 construct. Tags: aws, cdk, supply-chain, command-injection, esbuild, nodejs, ci-cd, rce.cloudHighawscdksupply-chaincommand-injectionesbuildnodejsci-cdrceAmazon WorkSpaces Skylight Workspace Config Service Local Privilege Escalation (CVE-2026-7791)https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-7791-aws-workspaces-skylight-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-7791-aws-workspaces-skylight-lpe/High severity — cloud · CVE-2026-7791. Status: PoC. Affects: Amazon WorkSpaces — Skylight Workspace Config Service. Tags: aws, amazon-workspaces, skylight, toctou, privilege-escalation, arbitrary-file-write, windows, directory-junction.cloudHighawsamazon-workspacesskylighttoctouprivilege-escalationarbitrary-file-writewindowsdirectory-junction