HIGH 8.7 NVD
CVE-2026-82863
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attacker
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring.
References
- https://github.com/kerberosmansour/hulumi/security/advisories/GHSA-gfp8-mp24-5vxg
- https://www.vulncheck.com/advisories/hulumi-baseline-before-1.3.2-cloudtrail-selector-tamp
This high severity vulnerability with a CVSS score of 8.7 was published on 2026-08-31 via NVD.
vulnfeed aggregates 11521 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.