AWS Language Servers arbitrary code execution and file write vulnerabilities

Two vulnerabilities in AWS Language Servers used by Amazon Q Developer allow arbitrary code execution and arbitrary file writes when users open maliciously crafted workspaces. The vulnerabilities stem from improper trust boundary enforcement and missing symlink validation.

Disclosed 24 September 2026 · Record updated 1 October 2026

Impact

Arbitrary code execution and arbitrary file write outside workspace trust boundary when users open maliciously crafted workspaces

Our coverage

A digital agent sits at a desk in a locked room, unaware that invisible hands from outside the walls are typing commands on its keyboard, writing files into drawers it shouldn't touch.

Vulnerabilities

Malicious workspaces could hijack Amazon Q Developer, AWS says

Two flaws in the language servers behind AWS's AI coding assistant allowed command execution and file writes outside the trusted workspace, both now patched.

24 Sept 2026

Sources

github.comhttps://github.com/advisories/GHSA-xhcr-j4j9-3gh7
github.comhttps://github.com/advisories/GHSA-6v3r-4p5c-mrp5