# CVE-2026-121652: AWS Amplify maplibre-gl-js-amplify stored XSS in popup rendering

Source: https://junglewise.ai/threats/cve-2026-121652-cross-site-scripting-xss-issue-in-aws-amplify-maplibre-gl-js  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-03. Updated: 2026-11-03  
License: CC BY 4.0 with a link back

CVE-2026-121652 · Severity: high · CVSS 5.4 · Published 2026-11-03

maplibre-gl-js-amplify is an AWS Amplify library that renders maps and location controls in web applications. A stored cross-site scripting vulnerability allows authenticated users to inject malicious scripts through location data properties that are displayed without sanitization, enabling session hijacking or data theft when other users view the compromised location markers or geofence controls.

Technologies: [Amazon AWS](https://junglewise.ai/threats/technologies/aws). Vendors: [Amazon](https://junglewise.ai/threats/vendors/amazon), [AWS](https://junglewise.ai/threats/vendors/aws).

## Quick answers

**Is CVE-2026-121652 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-121652 being exploited in the wild.

**How severe is CVE-2026-121652?** High severity, with a CVSS score of 5.4, published 3 November 2026.

**Which products and versions are affected?** AWS Amplify maplibre-gl-js-amplify before 4.0.3.

**Is there a fix for CVE-2026-121652?** Yes: fixed in 4.0.3. Until then: Applications unable to upgrade immediately should validate and sanitize all user-supplied location and geofence data on input, and apply a restrictive Content Security Policy to limit the impact of injected scripts. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-121652 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-121652?** Check whether you run Amazon AWS or AWS Amplify maplibre-gl-js-amplify at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 4.0.3

Applications unable to upgrade immediately should validate and sanitize all user-supplied location and geofence data on input, and apply a restrictive Content Security Policy to limit the impact of injected scripts.

## Technical details

Stored XSS vulnerability in popup and geofence control rendering functions that interpolate user-controlled GeoJSON properties (title, address, place_name) and geofence identifiers directly into the DOM via innerHTML without HTML escaping. An authenticated attacker can inject malicious payloads through location records or geofence configurations that execute in other users' browsers, requiring the attacker to be able to store malicious location data and a victim to render the compromised marker or geofence control.

## Affected products

- AWS Amplify maplibre-gl-js-amplify before 4.0.3

## Timeline

- 2026-11-03: disclosed
- 2026-06-24: patched

## References

- [https://aws.amazon.com/security/security-bulletins/2026-167-aws/](https://aws.amazon.com/security/security-bulletins/2026-167-aws/)
- [https://github.com/aws-amplify/maplibre-gl-js-amplify/releases/tag/v4.0.3](https://github.com/aws-amplify/maplibre-gl-js-amplify/releases/tag/v4.0.3)

## Related threats

- [An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 (awssql/v2.0.0)](https://junglewise.ai/threats/cve-2026-126793-privilege-escalation-in-aurora-postgresql-dialect-detection-in)
- [AWS SDK for pandas EMR unverified bucket ownership](https://junglewise.ai/threats/cve-2026-127119-unverified-ownership-of-the-default-emr-cluster-log-location-in)
- [Amazon mcp-gateway-registry server-side request forgery in registration API](https://junglewise.ai/threats/cve-2026-125926-server-side-request-forgery-in-the-server-registration-and)
- [Amazon mcp-gateway-registry authorization bypass in management API](https://junglewise.ai/threats/cve-2026-100307-missing-authorization-on-the-external-management-api-in-mcp)
- [AWS Kiro CLI incorrect default permissions on session files](https://junglewise.ai/threats/cve-2026-124848-incorrect-default-permissions-on-session-transcripts-and-prompt)