Is CVE-2026-107332 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-107332?

CVE-2026-107332 has a CVSS v3 severity of MEDIUM (5.5).

Back

CVE-2026-107332

Description

Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later.