# CVE-2026-119085: Amazon Virtual Engineering Workbench template injection in publishing component

Source: https://junglewise.ai/threats/cve-2026-119085-template-injection-in-the-publishing-component-of-virtual  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-02. Updated: 2026-11-02  
License: CC BY 4.0 with a link back

CVE-2026-119085 · Severity: high · CVSS 8.8 · Published 2026-11-02

Virtual Engineering Workbench is an open-source platform that allows platform engineers to define and publish development environments for on-demand provisioning. A template injection vulnerability in the publishing component allows authenticated attackers to execute arbitrary code with the permissions of the Lambda function managing the platform, potentially accessing data and resources across all tenant projects.

Technologies: [Amazon AWS](https://junglewise.ai/threats/technologies/aws). Vendors: [Amazon](https://junglewise.ai/threats/vendors/amazon).

## Quick answers

**Is CVE-2026-119085 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-119085 being exploited in the wild.

**How severe is CVE-2026-119085?** High severity, with a CVSS score of 8.8, published 2 November 2026.

**Which products and versions are affected?** Amazon Virtual Engineering Workbench All commits before c146486 (PR #31, merged 2026-05-04).

**Is there a fix for CVE-2026-119085?** Yes: fixed in Commit c146486 (PR #31); latest version of the main branch. Until then: There is no workaround that removes the issue. Until you redeploy with the patched version, limit which users can create or update product versions to reduce exposure. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-119085 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-119085?** Check whether you run Amazon AWS or Amazon Virtual Engineering Workbench at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Commit c146486 (PR #31); latest version of the main branch

There is no workaround that removes the issue. Until you redeploy with the patched version, limit which users can create or update product versions to reduce exposure.

## Technical details

The vulnerability is an improper neutralization of special elements in a template engine (CWE-1336 / template injection) in VEW's publishing component. An authenticated remote attacker can submit a crafted CloudFormation template body containing template engine directives through the product versioning API to achieve arbitrary code execution with the publishing Lambda's IAM role permissions. A fix is available in commit c146486.

## Affected products

- Amazon Virtual Engineering Workbench All commits before c146486 (PR #31, merged 2026-05-04)

## Timeline

- 2026-11-02: disclosed
- 2026-05-04: patched: Commit c146486 merged in PR #31

## References

- [https://aws.amazon.com/security/security-bulletins/rss/2026-162-aws/](https://aws.amazon.com/security/security-bulletins/rss/2026-162-aws/)

## Related threats

- [An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 (awssql/v2.0.0)](https://junglewise.ai/threats/cve-2026-126793-privilege-escalation-in-aurora-postgresql-dialect-detection-in)
- [AWS SDK for pandas EMR unverified bucket ownership](https://junglewise.ai/threats/cve-2026-127119-unverified-ownership-of-the-default-emr-cluster-log-location-in)
- [Amazon mcp-gateway-registry server-side request forgery in registration API](https://junglewise.ai/threats/cve-2026-125926-server-side-request-forgery-in-the-server-registration-and)
- [Amazon mcp-gateway-registry authorization bypass in management API](https://junglewise.ai/threats/cve-2026-100307-missing-authorization-on-the-external-management-api-in-mcp)
- [AWS Kiro CLI incorrect default permissions on session files](https://junglewise.ai/threats/cve-2026-124848-incorrect-default-permissions-on-session-transcripts-and-prompt)