⌁ CyberSecurityBoardThreat Intel · CVEs · Products

Tag: CVE-2026-82856

Critical CVEs

CVE-2026-82856 — Critical vulnerability brief

@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators in GitHub OIDC trust policies. Attackers can use ForAnyValue:StringLike…

critical Critical CVE CVE-2026-82856
August 31, 2026