CVE-2026-82863

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-82863

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82863.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-82863

Aliases

GHSA-gfp8-mp24-5vxg

Published

2026-08-31T08:46:34.583Z

Modified

2026-09-02T03:47:22.239936082Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

@hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection

Details

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82863.json",
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-778"
    ]
}

References

Affected packages

Git / github.com/kerberosmansour/hulumi

Affected ranges

Type

GIT

Repo

https://github.com/kerberosmansour/hulumi

Events

Introduced

Fixed

53e9bafaa3a7cabde60685453874caa27b65bfa3

Database specific

Show details

{
    "source": [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.3.2"
        }
    ]
}

Affected versions

v1.*

v1.2.0

v1.3.0

v1.3.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82863.json"