Is CVE-2026-86516 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86516?

CVE-2026-86516 has a CVSS v3 severity of MEDIUM (4.7).

Back

CVE-2026-86516

Description

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege management. It is possible to initiate the attack remotely. The patch is named 6ab3147282d867c1993f995272750db091c2290b. Applying a patch is the recommended action to fix this issue.