Skip to content
Threat Feed
Subscribe

Product

Hulumi (< 1.3.2)

1 brief RSS
critical advisory

Privilege Escalation in hulumi via IAM Policy Misconfiguration

hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that permits unauthorized role lifecycle operations on af-e2e-* roles.

hulumi privilege-escalation cloud-security identity-access-management iac vulnerability rce execution
3t 1c