CVE-2025-65200
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the _localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the docker container.
| Vendor | n/a |
| Product | n/a |
| Published | Oct 22, 2026 |
| Last Updated | Oct 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a n/a
Be the first to know when new unknown vulnerabilities affecting n/a n/a are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / n/a
n/a
References
localstack.com: http://localstack.com github.com: https://github.com/localstack/localstack/blob/aba1ee84592d76f0a88dd286fcd83b65080e31ac/localstack-core/localstack/services/cloudformation/deploy_ui.py github.com: https://github.com/localstack/localstack/pull/13293/ cyberroute.github.io: https://cyberroute.github.io/post/2025-12-11-localstack-hack/